A user was unable to refresh a Google BigQuery extract on Tableau Server when using embedded credentials. Other users with the same connection details were able to connect, publish, and refresh successfully, but the affected user's refresh failed with an insufficient authentication scopes error.
1. Confirm whether the issue is isolated to one user by comparing the failing user's behavior with another user who can publish and refresh the same Google BigQuery data source successfully.
2. Ask the affected user to authenticate again and ensure all requested Google permissions are approved on the consent page when creating the Google BigQuery connection in Tableau Desktop, then publish again.
3. If the issue persists after approving permissions, reauthorize access from the user's Google account by signing in to Google Account, going to Profile > Security > Third-Party Apps and Services, removing both Tableau and Tableau Server entries, returning to Tableau Desktop to authenticate again, granting all requested permissions, and then republishing the workbook to Tableau Server.
Error from logs:
{"ts":"2026-05-26T10:16:51.440","pid":95443,"tid":"197f7","sev":"warn","req":"25590b48-e291-49f5-923c-6815d4c511d7","sess":"AA66897AA6D0494EBAD8D9CB3EFDC915-3:3","site":"Technology & Transformation","user":"transientSession","k":"excp","e":{"excp-error-code":"0xDEF22B9A","excp-source":"Client","excp-status-code":"UNAUTHENTICATED"},"v":{"excp-msg":"You do not have permission to perform the requested operation.\n","excp-type":"HTTPException","msg":"HTTPRequestor: rethrow exception"}}
{"ts":"2026-05-26T10:16:51.444","pid":95443,"tid":"197f7","sev":"warn","req":"25590b48-e291-49f5-923c-6815d4c511d7","sess":"AA66897AA6D0494EBAD8D9CB3EFDC915-3:3","site":"Technology & Transformation","user":"transientSession","k":"excp","e":{"excp-error-code":"0x015CFBE6","excp-source":"Client","excp-status-code":"PERMISSION_DENIED"},"v":{"class":"bigquery","connectivity_stage":"ConnectivityStage::Unknown","dse-type":"NoPermission","excp-msg":"The Google BigQuery service reported an unrecognized error when processing this request.\nRequest had insufficient authentication scopes.\nInsufficient Permission\n","excp-type":"ConnectivityException","is-bad-request":true,"is-capability-probe-failure":false,"is-local-configuration-error":false,"is-remote-configuration-error":false,"msg":"ConnectivityException::Init","server_version":"","sql_state":""}}
005386351

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.