BigQuery

Requirements

• To grant access to BigQuery tables, you must have the Owner role or sufficient permissions for the BigQuery project that contains the table.
• Tables or views should be updated before each import.
• For OCI, one table or view is required per conversion event.
• BigQuery views must be fully authorized and the source of the view cannot include external tables. Learn more about authorized views and external data sources.

Set up BigQuery as a data source

Note: If you have access to a large number of tables or projects, you may experience a delay to download and display your tables. Please allow up to five minutes for a list of tables to become available. If the number of tables or projects is very large, the table list may fail to load.

Apply a use case now

The following sections walk you through a single procedure to link a data source to a use case. Click on your use case to expand the steps. To link the data source only, and apply a use case later, see Apply a use case later.

Customer Match

1. From Google Ads, click Tools > Shared library > Audience manager > + (Create) > Customer list.
   1. Optional: If you already created a segment and skipped adding a data source, click Tools > Data manager > Connected products > Connect source.
2. Under Data source, search and select Google BigQuery from the list of products.
3. Select Direct connection, then click Continue.
   1. If you previously linked a data source from the Data manager screen that you want to use, select Select an existing source.
4. Under Select a data type, select the data type, then click Continue.
5. Select the BigQuery project, dataset, and table that you want to use. An alert appears.
6. Click Apply to grant access, then click Next.
7. To map fields, select the data source fields from the dropdown lists that match the Google fields, then click Continue.
8. Enter a name for this connection.
9. Optional: Edit connection details.
10. Click Done.
11. Enter a name for the segment, confirm policy compliance, then click Create.

Learn more about Customer Match.

Offline Conversion Import

1. From Google Ads, click Goals > Summary > + New conversion action.
   1. Optional: If you already created a conversion and skipped adding a data source, click Tools > Data manager > Connected products > Connect source.
2. Click Import.
3. Select CRMs, files, or other data sources.
4. Select a tracking method.
5. Under Data source, select Connect a new data source.
   1. If you previously linked a data source from the Data manager screen that you want to use, select Select an existing source.
6. Search and select Google BigQuery from the list of products.
7. Select the Customer data box, to acknowledge that the data was collected and is being shared in compliance with Google's policies, then click Continue.
8. Select Direct connection, then click Continue.
9. Select a conversion goal from the list, then click Set up.
10. Click Save and continue.
11. Select the BigQuery project, dataset, and table that you want to use. An alert appears.
12. Click Apply to grant access, then click Next.
13. To map fields, select the data source fields from the dropdown lists that match the Google fields, then click Continue.
14. Enter a name for this connection.
15. Optional: Edit connection details.
16. Click Done.
17. Click Save and continue.

Learn more about Offline conversion imports.

Apply a use case later

In this type of setup, you complete each part of the connection at different times. This can be useful when you are ready to link a data source, but you are not ready to set up your use case–for example, you aren’t ready to create a customer list.

Consider the following scenario: 

• Step 1: Dana is an engineer who manages data for your company. Dana sets up the data source to be used for activation in Google Ads. The data source is ready to be associated with a use case.
• Step 2: Mahan is a media specialist who needs to measure audience activation. Mahan creates a customer list and then associates it to the data source that Dana has previously set up, to use that data for Customer Match.

Step 1. Initiate the connection to the data source

Set up a data source and create a connection to be associated with a use case later.

1. In Google Ads, click Tools > Data manager > Connected products
2. Select + Connect product.
3. Under Data source, search and select a data source from the list of products.
4. If prompted, select Direct connection.
5. Select your use case, read and accept the customer data policy, then click Continue. If you select Audiences, you are prompted to select the data type at this step.
6. Enter your data source credentials*, then click Connect.
7. Enter the data location* that you want to use, then click Next.
8. To map fields, select the data source fields from the dropdown lists that match the destination fields.
9. Optional: Apply transformations to your data.
10. Click Next.
11. Enter a name for this connection.
12. Optional: Edit connection details.
13. Click Finish.

* Use the same credentials and location details for this data source as described in the first part of this article.

Step 2. Complete the connection by applying a use case

1. Open the destination you intend to use–for example, begin to create a new customer list or conversion action using the steps from the previous sections. Return to these steps before completing the data source step.
2. Under Data source, select Select an existing source.
3. Select the data source that was initiated in Step 1 from the list of data sources.
4. Continue to follow the remaining steps for your use case in the first part of this article. Note that you will skip further data source-related steps, such as entering credentials, because you completed these previously.

 

BigQuery permissions

To grant Google Ads access to your BigQuery project, you must have the role of BigQuery Data Owner on the project. If you don’t use basic roles, you must have the following underlying permissions:

• bigquery.tables.getIamPolicy
• bigquery.tables.setIamPolicy
• resourcemanager.projects.getIamPolicy
• resourcemanager.projects.setIamPolicy
• bigquery.datasets.setIamPolicy
• bigquery.datasets.update

By granting Google Ads access to your BigQuery project, you are providing Google Ads service accounts with the following permissions:

Service account type and purpose	Service account and permissions required in customer-owned BigQuery project
Datafusion service account This service account is used to display fields from a data source in Google Ads UI.	[e-mail] BigQuery Data Viewer on the table
Dataproc service account This service account is used to execute the data load pipelines.	[e-mail] BigQuery Data Viewer on the table BigQuery Metadata Viewer on the dataset

To apply these permissions manually in BigQuery, see Grant access to a resource.

Using VPC Service Controls

If you use VPC Service Controls (VPC-SC), this perimeter restricts access to your BigQuery project by all services. To allow Data Manager to import data from your BigQuery project to Google Ads, the project must be configured with ingress and egress rules. You can allow these rules to be configured automatically, or if needed, you can configure them manually. The following sections describe both methods.

Configure automatically

Data Manager can apply the required rules for you. If the rules are not already configured when you begin setting up BigQuery as a data source, you are prompted to apply them during the enablement workflow. When you click Apply, the necessary rules on the required resources are granted on your behalf. 

In order to consent to the automatic configuration, you must meet both of these conditions:

1. You have the necessary IAM permission to apply the rules
2. Your organization’s VPC-SC configuration allows you to apply the rules

Configure manually

To configure the rules yourself, open Cloud Console, then edit the VPC service parameter rules with the following configuration:

Ingress rules for Google Ads
FROM attributes	Identity	[e-mail] [e-mail]
	Source	All Sources
TO attributes	Project	All projects. At minimum, select the project that hosts the table you want to use.
	Services	BigQuery API bigquery.googleapis.com Cloud Resource Manager cloudresourcemanager.googleapis.com Cloud Storage API storage.googleapis.com	All methods

 

Egress rules for Google Ads
FROM attributes	Identity	[e-mail] [e-mail]
TO attributes	Project	All projects. At minimum, select the project that hosts the table you want to use.
	Services	Cloud Storage API storage.googleapis.com	All methods