Create Authorization | Teradata OTF - Create Authorization - Teradata Vantage

Teradata® Open Table Format for Apache Iceberg and Delta Lake User Guide

Deployment
VantageCloud
VantageCore
Edition
VMware
Enterprise
IntelliFlex
Lake
Product
Teradata Vantage
Release Number
20.00
Published
October 2025
ft:locale
en-US
ft:lastEdition
2026-06-17
dita:mapPath
qrj1749167830193.ditamap
dita:ditavalPath
lli1749584660955.ditaval
dita:id
bsr1702324250454

Use the following authorization to allow OTF to access the BigLake REST Catalog and Google Cloud Storage:

CREATE AUTHORIZATION gcp_idp_auth
USER 'REPLACE_WITH_GOOGLE_SERVICE_ACCOUNT_CLIENT_EMAIL'
PASSWORD 'REPLACE_WITH_GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY';

Parameter Notes

  • USER: Use the client_email from your Service Account JSON key.
  • PASSWORD: Use the full private_key from the JSON key (including the BEGIN/END markers).

Supported Authorization Types

The REST Catalog supports the following authorization types:

  • Definer trusted: The authorization is stored in td_server_db and is available to all authorized users.
  • Invoker trusted: The authorization is created in the current user’s database and is accessible only to that user.
  • Simple: A basic authorization type available for general use.All three authorization types are supported and can be used with the REST Catalog.