Using OAuth AuthenticationCData Cmdlets for Google BigQuery 2019 - Build 19.0.7354
Use the OAuth authentication standard to connect to Google BigQuery. You can authenticate with a user account or a service account. The cmdlet facilitates this as described below.
Using a User Account to Authenticate to Google BigQuery
The user account flow requires the authenticating user to interact with Google BigQuery via the browser.
Desktop ApplicationsSee Embedded Credentials to connect with the cmdlet's embedded credentials and skip creating a custom OAuth app.
Headless MachinesSee Headless Machines to skip creating a custom OAuth app and authenticate an application running on a headless server or another machine where the cmdlet is not authorized to open a browser.
Instead of connecting with the cmdlet's embedded credentials, you can register an app to obtain the OAuthClientId and OAuthClientSecret.
When to Create a Custom OAuth App
Creating a custom OAuth app is optional as the cmdlet is already registered with Google BigQuery and you can connect with its embedded credentials. You might want to create a custom OAuth app to change the information displayed when users log into the Google BigQuery OAuth endpoint to grant permissions to the cmdlet.
Creating a custom OAuth app is optional to authenticate a headless machine; the cmdlet is already registered with Google BigQuery and you can connect with its embedded credentials. In the headless OAuth flow, users need to authenticate via a browser on another machine. You might want to create a custom OAuth app to change the information displayed when users log into the Google BigQuery OAuth endpoint to grant permissions to the cmdlet.
Using a Service Account to Connect to Google BigQuery
Service accounts have silent authentication, without user authentication in the browser. You can also use a service account to delegate enterprise-wide access scopes to the cmdlet.
You need to create an OAuth application in this flow. You can then connect to Google BigQuery data that the service account has permission to access. See Custom Credentials for an authentication guide.
Creating a Custom OAuth App
See Creating a Custom OAuth App for a procedure.