gcloud projects add-iam-policy-binding ${projectId} --member serviceAccount:${serviceAccount.client_email} --role roles/bigquery.dataViewer