title: Minimum IAM Permissions for writing to a BigQuery table?
body: <p>I'd like to have a job write to a <em>single</em> BigQuery table. I thought the IAM permissions would be simple, granting <code>BigQuery Jobs User</code> role to the Service Account on the respective table, but I'm getting the error.</p>
  <p><code>Access Denied: Project &lt;your-project&gt;: User does not have bigquery.jobs.create permission in project &lt;your-project&gt;</code></p>
  <p>Is there a way to avoid granting a Service Account access to an entire project, when you only want to grant access to a single table in a single dataset? How does one apply the Principle of Least Privilege in GCP BigQuery?</p>
  <p>Code making the query:</p>
  <pre><code>const bigquery = new BigQuery({projectId});
  await bigquery
    .dataset(datasetId)
    .table(tableId, {location: DATASET_LOCATION})
    .load(fileRef);
  </code></pre>