Learn how to create a GCP service account, assign the required permissions, and generate a service account key so that Reltio can write data to your BigQuery dataset.

1. In the Google Cloud console, open the navigation menu.
2. Select IAM & Admin, and then select Service Accounts.
3. Select + CREATE SERVICE ACCOUNT.
4. In the Service account name field, enter a name that identifies the account's purpose, for example, reltio-gbq-connector.

   The Service account ID field auto-generates from the name, edit the ID if needed.

5. In the Service account description field, enter a brief description, for example, Service account for Reltio GBQ data pipeline.
6. Select CREATE AND CONTINUE.
7. Skip the optional role and user access sections for now.

   In Assign project-level permissions to your service account, you assign the Reltio GBQ connector Project Level role and the BigQuery Data Owner role to the service account.

8. Select DONE.

   The service account appears in the Service Accounts list.

9. In the Google Cloud console, open the navigation menu.
10. Select IAM & Admin, and then select IAM.
    
11. In the PERMISSIONS tab, select GRANT ACCESS.
12. In the Grant access panel, provide the following details.
    
    1. In the New principals field, enter the email address of your service account.
    2. In the Select a role drop-down list, select the Reltio GBQ connector Project Level custom role. This role includes the following permissions that allow Reltio to write data to your GCP project.

       Permission	Purpose
       serviceusage.services.use	Allows Reltio to use enabled GCP services in the project
       bigquery.jobs.create	Allows Reltio to create BigQuery jobs to process and stream data
       bigquery.jobs.get	Allows Reltio to retrieve the status of BigQuery jobs

13. Select Save.

14. In the Google Cloud console, open BigQuery.
15. In the Explorer panel, expand your project and select the dataset you created.
16. Select SHARING, and then select Permissions from the drop-down list.
17. In the Dataset Permissions panel, select ADD PRINCIPAL.
    
18. In the Grant access panel, provide the following details.
    1. In the New principals field, enter the email address of your service account.
    2. In the Select a role drop-down list, select BigQuery Data Owner.
19. Select Save.

20. In the Google Cloud console, open the navigation menu.
21. Select IAM & Admin, and then select Service Accounts.
22. In the Service Accounts list, select the service account you created.
23. Select the KEYS tab.
24. Select ADD KEY.
    The JSON key file downloads to your computer automatically.

    Important: Store the JSON key file securely as the Google Cloud console does not allow you to download it again. Upload it while configuring the GBQ pipeline in the Reltio Console. Do not share it in or commit it to version control. If the key is compromised, delete it immediately from the KEYS tab and generate a replacement.