> For the complete documentation index, see [llms.txt](https://guides.tability.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://guides.tability.io/docs/become-a-tability-power-user/integrations/google-service-account.md).

# Google Service Account

You can connect Tability to a Google Service Account to centralise the data connectors for Google Sheets and BigQuery. Once that your service account is connected, you can simply give it access to specific BigQuery and Google Sheets data that need to be accessible by Tability users.

## Privacy

Tability's use and transfer of information received from Google APIs to any other app will adhere to[ Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes), including the Limited Use requirements.

## How to create a Google Service Account

1. Go to Google Cloud Console.
2. Create (or select) a project.
3. **Enable APIs**:
   * Search for **Google Sheets API** and enable it.
4. **Create a Service Account**:
   * Go to **IAM & Admin → Service Accounts → Create Service Account**.
   * Give it a name (e.g., `tability-integration`).
5. Create a **JSON key**:
   * In the Service Account’s **Keys** tab → **Add Key → Create new key → JSON**.
   * Download the JSON file (you’ll use it for the integration with Tability).

## How to connect the service account to Tability

1. Go to your workspace in Tability
2. Go to **Settings > Integrations**
3. Click on **Connect to Google Service Account**
4. Paste your JSON key and save

<figure><img src="/files/3ELFv5iYrLiKL6wcBFoj" alt=""><figcaption></figcaption></figure>

## **How to give your service account access to a Google Sheet**

The service account has an email like `my-service@my-project.iam.gserviceaccount.com`

1. Open your Google Sheet in the browser.
2. Share it **exactly like you would to a person** — paste that email in “Share with” and give it viewer permission

## How to give your service account access to a BigQuery project

### Enable the BigQuery API

1. In Google Cloud Console, make sure you’re in the correct project.
2. Go to **APIs & Services → Library**.
3. Search for **BigQuery API** and click **Enable**.

### Granting project-level roles

1. Navigate to **IAM & Admin → IAM**.
2. Click **+ Grant Access**.
3. Enter the **service account email** (e.g. `my-service@my-project.iam.gserviceaccount.com`).
4. Under **Select a role**, choose:
   * **BigQuery Job User** (`roles/bigquery.jobUser`) → allows running queries.
   * Optionally, **BigQuery User** (`roles/bigquery.user`) → allows creating datasets.
   * Or **BigQuery Admin** (`roles/bigquery.admin`) if you want full control.
5. Click **Save**.

### Granting dataset-level access

Project-level roles let the service account run jobs, but you also need dataset permissions so it can read/write data.

1. Go to **BigQuery** in the console.
2. In the **Explorer**, expand your project → hover over the dataset name.
3. Click the **three-dot menu** → **Share** (or **Permissions**).
4. In the panel:
   * Add the service account email.
   * Assign a dataset role:
     * **BigQuery Data Viewer** → read tables.
     * **BigQuery Data Editor** → read/write tables.
     * **BigQuery Data Owner** → full dataset control.
5. Click **Done**.