Since ~Oct 23 a user in our organization cannot browse tables in the Looker Studio BigQuery connector for project (PII Removed by Staff). Every dataset shows “There are no tables available in this dataset”. The underlying datastudio.google.com/getAccountTree call returns:
)]}’
{“errorStatus”:{“code”:7}}
(code 7 = PERMISSION_DENIED). The user can still query the same tables via a Custom Query in the same connector.
What we have verified on the GCP side:
- The user holds two project-level custom roles containing bigquery.datasets.get, bigquery.tables.list, bigquery.tables.get, bigquery.tables.getData, bigquery.jobs.create, resourcemanager.projects.get (plus more). Datasets inherit projectReaders/projectWriters.
- No IAM deny policies affecting BigQuery, no restrictive org policies, no VPC Service Controls, no table-level IAM, no row-access policies, no policy tags.
- When the user is temporarily granted roles/owner on the project, the picker lists tables immediately for all datasets. Removing owner brings back the error. No other change in between.
- With Data Access audit logs enabled for all services, the connector only produced a GetProject call (granted); the subsequent table listing is not audited, so we can’t see which permission is being denied.
- Other users with the same roles in the same project are also affected (several, not one).
Questions:
- Which exact permission/API does the BigQuery connector table picker evaluate beyond bigquery.tables.list that roles/owner satisfies but a custom role with the permissions above does not?
- Is this related to a recent change in the connector (the issue started around Oct 23, 2026)?
Thanks