BigLake Iceberg is only supported for BigQuery environments. The same service account used for your BigQuery warehouse connection is reused — no separate credentials are required.
GCP Setup
1. Grant additional IAM roles
Elementary reuses the service account that is already connected to your BigQuery environment. You only need to grant three additional roles to that service account: On the GCP project that owns the BigLake catalog:2. Scope the Storage Object Viewer role to metadata files only
For security, restrict theStorage Object Viewer role to Iceberg metadata files rather than granting access to all objects in the bucket.
When assigning the role on the GCS bucket, add a condition:
*.metadata.json files — the Iceberg snapshot metadata — and nothing else in the bucket.

