Set up a BigQuery project for reporting logs

Supported editions for this feature: Frontline Standard and Frontline Plus; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition

Before you set up BigQuery logs in the Google Admin console, you need to set up a BigQuery project for your reporting logs in the Google Cloud console.

Important: If you use the Domain Restricted Sharing organization policy in Google Cloud, make sure you add the Google customer ID C02h8e9nw to the allowlist.

  1. In the Google Cloud console, create or open an active BigQuery project. For details, go to Creating and managing projects. Note: You need to enable billing for each project you create.
  2. Go to the IAM & Admin page for your project.
  3. Assign the Workspace administrator the BigQuery Admin (roles/bigquery.admin) and Project IAM Admin (roles/resourcemanager.projectIamAdmin) roles. The Workspace administrator sets up the BigQuery project in the Google Cloud console. For details, go to Predefined roles and permissions.
    1. At the top of the page, click Add.
    2. For Add principals, enter the Workspace administrator's user ID.
    3. For Assign roles, select BigQuery and then BigQuery Admin.
    4. Click Add another role to add the same person as the BigQuery Admin.
    5. Select Resource Manager and then Project IAM Admin.
    6. Click Save.

Next, set up BigQuery logs in the Admin console.