Setting up BigQuery OAuth

Enterprise Feature

This guide describes a feature of the dbt Cloud Enterprise plan. If you’re interested in learning more about an Enterprise plan, contact us at

dbt Cloud supports OAuth authentication with BigQuery. When BigQuery OAuth is enabled, users can interact with the BigQuery warehouse as individual users, rather than leveraging a shared service level authentication.

Some Pre-Work Required

Before setting up a Client ID & Secret, you'll have to have your existing BigQuery Settings in order. We recommend using a Service Account JSON file, and have a walkthrough for that here - you will also need to set up an OAuth Consent Screen if you haven't already!

Configuring a Client ID & Secret

To enable BigQuery OAuth, you will need a Client ID & Secret for authentication with BigQuery to manage the OAuth connection between dbt Cloud and BigQuery.

In the BigQuery console you'll want to navigate to the Credentials page:

BigQuery Sidebar Menu to Credentials Page

BigQuery Sidebar Menu to Credentials Page

There you'll see your existing Keys, Client IDs and Service Accounts - you'll want to click the "Create Credentials" button at the top and follow the steps, like this:

Creating OAuth Credentials in BigQuery

Creating OAuth Credentials in BigQuery

For the fields we recommend the following:

Application typeWeb application
Namedbt Cloud
Authorized Javascript origins
Authorized Redirect URIs
Deployment Nuance

If you're using a deployment other than the standard dbt Cloud multi-tenant, you'll need to replace with the hostname of your cloud instance here!

Then, click the blue Create button, which will display your Client ID and Client Secret, with handy clipboard buttons for copying into other screens, which is exactly what we're about to do. These values will continue to be available in your Credentials screen in perpetuity, this is not the only chance you have to access them.

Configure the Connection in dbt Cloud

Back in dbt Cloud, you'll want to navigate to your Connection page for BigQuery. There you'll be able to click the Edit button in the top corner to enable writing into the OAuth 2.0 Settings boxes near the bottom.

Edit Button in dbt Cloud BQ Connection

Edit Button in dbt Cloud BQ Connection

With Editing enabled, you can copy paste the Client ID and the Client Secret you created in BigQuery into their respective boxes, and return to the top of the page, to Save your new OAuth Credentials.