DATA OPS

Self-serve BigQuery export from a Slack slash command with masked delivery

Lets teammates request a data export by typing a Slack slash command; runs the query against an allowlist, masks PII, and DMs back a private Dropbox link.

CategoryData Ops
Enginesim
Difficultyintermediate
Triggerchat
Steps6
Setup~15 min

How it runs

The automated pipeline, trigger to output.

  • TriggerSlack slash command invokedSlack
  • LogicValidate report against approved allowlist
  • ActionRun matched query in BigQueryGoogle BigQueryBigQuery
  • LogicMask PII columns for the report
  • ActionUpload masked file to DropboxDropboxDropbox
  • OutputDM Dropbox link to requester in SlackSlack

What it does

Gives non-technical teammates a self-serve export without warehouse access. They invoke a Slack slash command naming an approved report and date range. The workflow validates the request against an allowlist of safe queries, runs it in BigQuery, masks PII columns, uploads to Dropbox, and DMs the requester a link.

When to use it

Use it when many people need routine exports of a small set of approved reports and you want to keep them out of the BigQuery console. The allowlist prevents arbitrary queries while still letting people self-serve.

How it works

  1. 1A Slack slash command triggers the workflow with the report name and parameters.
  2. 2A logic step checks the requested report against the approved allowlist; unknown requests are rejected with a Slack reply.
  3. 3BigQuery runs the matched, parameterized query.
  4. 4A masking step redacts PII columns for that report.
  5. 5The masked file is uploaded to Dropbox.
  6. 6Slack DMs the requester the private Dropbox link.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect SlackChannels, DMs, threads, mentions.
  2. 2
    Connect BigQueryDatasets, queries, schemas.
  3. 3
    Connect DropboxFiles and folders.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.