Loading
Salesforce now sends email only from verified domains. Read More

Embedded Bigquery Datasource Displaying Error "Tableau needs an unexpired OAuth refresh token to connect to the data"

Publish Date: Nov 12, 2025
Description

Bigquery oauth credentials not working for some users.

Cause

  • Not all data sources within the workbook are embedded with credentials
  • The Bigquery account being used to embed credentials have hit the limitation for allowed bigquery refresh tokens. The oldest refresh token that is embedded in a data source will become invalid and will need to replaced with a new one. Bigquery has a limit of refresh tokens, between 25-50. 
Resolution
  • Ensure all data sources associated with the workbook are embedded. 
If they are:
  • We would recommend configuring a BigQuery Service Account (json), adding those to a publishers Saved Credentials, and republishing the content using that service account rather than the OAuth account. BigQuery Service Accounts do not use OAuth, thus would bypass both the token limit and token expiration scenarios
https://cloud.google.com/bigquery/docs/authentication/service-account-file
Additional Resources

OAuth token can be expired by the session limit set by Google too. 

Error "reauth related error (invalid_rapt)" Accessing Published BigQuery Workbooks Or Refreshing Extracts

 

 

 

 

Knowledge Article Number

001496752

 
Loading
Salesforce Help | Article