Use the following authorization to allow OTF to access the BigLake REST Catalog and Google Cloud Storage:
CREATE AUTHORIZATION gcp_idp_auth USER 'REPLACE_WITH_GOOGLE_SERVICE_ACCOUNT_CLIENT_EMAIL' PASSWORD 'REPLACE_WITH_GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY';
Parameter Notes
- USER: Use the client_email from your Service Account JSON key.
- PASSWORD: Use the full private_key from the JSON key (including the BEGIN/END markers).
Supported Authorization Types
The REST Catalog supports the following authorization types:
- Definer trusted: The authorization is stored in td_server_db and is available to all authorized users.
- Invoker trusted: The authorization is created in the current user’s database and is accessible only to that user.
- Simple: A basic authorization type available for general use.All three authorization types are supported and can be used with the REST Catalog.