# BigQuery: Access Denied: Project my-project: User does not have bigquery.jobs.create permission in project my-project

**Code:** `BigQuery: Access Denied: Project: User does not have bigquery.jobs.create permission` · **Category:** Google Cloud / Firebase · **Seen on:** Google Cloud, SQL

The principal can read data but is not allowed to run query jobs in the project used for billing.

## Meaning

Query jobs run in a project (the billing/job project), separate from the data project. Grant `roles/bigquery.jobUser` on the job project, plus `roles/bigquery.dataViewer` on the datasets. Set the correct project in your client (`client = bigquery.Client(project=...)`).

## Common causes

- Missing bigquery.jobUser role
- Client using the data project as job project without rights
- Service account lacking dataViewer on the dataset
- Wrong default project in gcloud/bq
- VPC Service Controls blocking

## Quick fix

1. Grant `roles/bigquery.jobUser` in the job project
2. Grant `roles/bigquery.dataViewer` on the dataset
3. Specify `--project_id` for bq or the client

## Detailed fix by platform

### bq

1. `gcloud projects add-iam-policy-binding PROJECT --member=user:you@example.com --role=roles/bigquery.jobUser`

## How to diagnose

1. **Job project** — Which one?
2. **Roles** — jobUser and dataViewer?
3. **Client** — Project set?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/gcp/bigquery-access-denied-jobs-create)