...
Create a Data Fusion instance
...
Setting up permissions for Datastore or BigQuery
Data Fusion uses service account to access GCP resources in wrangler, preview and for pipelines running on Dataproc. The service account used for running services in the tenant project such as preview, wrangler is in the following format service-<customer-project-number>@gcp-sa-datafusion.iam.gserviceaccount.com. This service account is already created when Cloud Data Fusion API is enabled on the project. Actual pipeline execution on the Dataproc cluster happens using compute engine default service account. Any additional GCP resources that Data Fusion needs access should have appropriate permissions for both of these service account.
Info |
---|
To find the customer project number, navigate to the customer project that contains the CDF instance and copy the project number on the Home Page in the Project Info card. |
For example, to add access to Datastore from preview and wrangler follow the steps below.:
...