Connection

Credentials

List of scopes separated by spaces. If not defined, using default scope `https://www.googleapis.com/auth/cloud-platform` (see Google OAuth2 documentation for the list of scopes).

Rotate refresh tokens

Whether DSS should expect refresh tokens to be renewed when an access token is retrieved

Impersonate service account

Impersonate a service account after initial authentication

Service account email

Perform WIF token exchange

For using Workload Identity Federation. Primarily used with OAuth2.

WIF Token Audience

Audience for the generated WIF token. Usually of the form //iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_NAME/providers/PROVIDER_NAME

WIF Token Endpoint

URL of the WIF Token endpoint

WIF Provider incoming audience

Optional. Incoming audience for the WIF Pool Provider. Can be found in the settings of the WIF Pool Provider. Only makes sense if authenticating through a service account. Does nothing when using OAuth2 (instead, the WIF Pool Provider must accept the audience of the ID Token provided by the OAuth2 IDP).

Snowflake fast loading/unloading

These optional settings are used for direct data loading from/unloading to Snowflake.

Path restrictions

Managed datasets & folders

Advanced

HDFS interface

Protocol to use for direct access to GCS datasets from Spark.

Metastore synchronization

Fallback metastore DB

Metastore database names can only contains letters, numbers and underscores.

This database is used as default for datasets that do not declare one

Connection

Snowflake fast loading/unloading

Path restrictions

Managed datasets & folders

Advanced

Custom endpoint/Universe