- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Hi @stravi001
What you are encountering on the SQL Query task is the expected behavior. You can use SQL File task as its behavior is more closely aligned with standard Job ACLs and completely skips the RunAsMode permission complexity.
SQL File Task
You can switch the Job task type from a SQL Query task to a SQL File task.By storing the SQL statements directly in a file you bypass the RunAsMode complexity. The SQL File task strictly uses the Job's Run as identity, which securely streamlines your permission model. More details here.
SQL Query Task
You can ask the Account Admin need to grant the Service Principal User role as below and validate once
To - The GCP SA and/or personal accounts (if both need to access the results).
On (Target) - The RunAs SP (the service principal configured in the job's Run as field).
