BigQuery

Databases Service account key Windmill docs

Query BigQuery from any Windmill script, flow or app. SQL runs natively — no client library, no boilerplate.

Set up in 3 steps

Create a service account and a key

In the Google Cloud console, open IAM & Admin, then Service Accounts. Create one, grant it BigQuery access on the project, then add a key and download the JSON.

Add the resource in Windmill

Open Resources, add a resource of type bigquery, and paste the JSON — its fields map one to one.

Write a SQL script

Pick BigQuery as the script language and write plain SQL against the resource.

Scripts

Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.

Execute arbitrary query

Script bigquery Verified

Resource type

bigquery — the shape of the credential every script on this page expects.

View raw schema →

Field	Type	Required
auth_provider_x509_cert_url	string	Yes
auth_uri	string	Yes
client_email	string	Yes
client_id	string	Yes
client_x509_cert_url	string	Yes
private_key	string	Yes
private_key_id	string	Yes
project_id	string	Yes
token_uri	string	Yes
type	string	Yes

Questions

Do I have to write TypeScript to query?

No. A BigQuery script is plain SQL.

Which roles does it need?

Reading needs BigQuery Data Viewer plus Job User to run the query. Writing needs Data Editor.

Are my credentials stored on the hub?

Never. They live only in your own Windmill workspace, encrypted at rest.