google bigquery - Multiple Credentials? OAuth? What defines a "project?"

Question

So I have an application that I want to be able to read from BigQuery and perform queries, be able to read from GSheets to form these queries and upload this data into a directory in Google Drive.

I understand how to individually do these things, but for the sake of consolidating my system, I would like to use one set of credentials for everything. Is this a good way to go about building my system? I would like to follow the "least access possible" guideline to limit visibility to the database.

Is the best way to go about this creating multiple credentials? Should I use OAuth Credentials and include relevant scopes? Or can I create one set of credentials for all of this?

I'm using python for the backend, don't think that's relevant to the question though.

question from:https://stackoverflow.com/questions/65924100/multiple-credentials-oauth-what-defines-a-project

Answer 1

The proper way to handle this is to create the project using the Google API Console and authorize all the APIs needed for this project.

Afterwards, you will have to select the APIs needed by following the steps from this article here.

In order to retrieve the credentials for the project, you will have to select the project you created and based on the type of application you plan on developing, you will have to select the type of credentials needed.

Selecting APIs & Service

Selecting Credentials

Then based on your choice, you will end up retrieving the credentials and use them in your application.

Reference

• Authorize Requests.