) icon and then select **Billing**.
4. On the API Manager page, select **Credentials**:
5. On the Credentials page, select **Manage service accounts**.
6. On the Service Accounts page, select **Create Service Account** and specify the following:
* Service account name
* Role - grant this microservice account role based access to the project. From the list, select the **BigQuery** category and then select **BigQuery Data Viewer** and **BigQuery User** roles.
* Service account ID
7. Select **Create**.
After you have created an account, create a security key for it.
**Create a security key**
1. On the **Service Accounts** page, find the required account.
2. From the menu, select **Create key**.
3. In the Create private key dialog, select **JSON** for the key type and select **Create**. The local copy of the key is saved on your computer.
For more information, see the following Google resource: [BigQuery Introduction to Authentication](https://cloud.google.com/bigquery/docs/authentication/).
4. Move the file with the key to the server, on which the connector is running.
### Connect to BigQuery Using OAuth
To create a BigQuery connection use one of the available authentication methods:
* Key authentication flow requires a security key to be generated at BigQuery and placed to the Self-Service Analytics instance.
* OAuth 2.0 requires providing OAuth `client_id` and `client_secrets` generated for a user that will serve for data retrieval, such as an integration user. Users are asked to authenticate via a separate authentication form. Users provide their individual credentials when accessing the data retrieved using this connection.
If both authentication methods are selected, connection via OAuth will have higher priority over key authentication except for the scheduled overrides setup.
| Authentication Flow | ||
|---|---|---|
| Key Path | Key Authentication | Absolute path to the key authentication file obtained from BigQuery and placed to Self-Service Analytics instance. |
| Public Project Ids | List of public project IDs that will be queried for the data. | |
| **OAuth 2.0 Enabled** | OAuth 2.0 | TRUE/FALSE |
| **Project Id** |
Billing project ID that will be queried for the data.
|
|
| **OAuth 2.0 Client Id** |
`client_id`: Obtain from BigQuery.
See [https://cloud.google.com/bigquery/docs/authentication/end-user-installed](https://cloud.google.com/bigquery/docs/authentication/end-user-installed). |
|
| **OAuth 2.0 Client Secrets** |
`client_secrets`: Obtain from BigQuery.
See [https://cloud.google.com/bigquery/docs/authentication/end-user-installed](https://cloud.google.com/bigquery/docs/authentication/end-user-installed). |