DATA OPS

BigQuery Grants Expiring Soon — Weekly Warning Digest

Weekly, collects all BigQuery grants expiring in the next 7 days, groups them by holder.

CategoryData Ops
Enginesim
Difficultybeginner
Triggerschedule
Steps5
Setup~5 min

How it runs

The automated pipeline, trigger to output.

  • TriggerWeekly schedule starts digest run
  • ActionQuery grants expiring in next 7 daysPostgreSQLPostgres
  • LogicGroup by holder, drop empty recipients
  • ActionEmail each holder their expiry digestGmailGmail
  • OutputLog warning-sent to avoid duplicatesPostgreSQLPostgres

What it does

This workflow gives people advance warning before their BigQuery access expires. It finds every grant expiring within a week, groups them per holder, and sends each holder a single email digest listing each dataset, the expiry date, and a prefilled extension-request link — so nobody is caught off guard when a binding drops.

When to use it

Run it alongside an automated revocation sweep to cut the surprise-and-scramble cycle. Best for teams where losing access mid-task is disruptive and a few days' notice lets users extend or wrap up in time.

How it works

  1. 1A weekly schedule starts the digest run.
  2. 2Postgres returns active grants where `expires_at` falls in the next 7 days.
  3. 3A logic step groups rows by holder email and drops anyone with no upcoming expiries.
  4. 4For each holder, an email is sent via Gmail with a per-grant table, expiry dates, and prefilled extension links.
  5. 5Postgres logs that a warning was sent so the same expiry isn't warned about twice.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect PostgresAny Postgres URL — query, write, migrate.
  2. 2
    Connect GmailRead, draft, send, label.
  3. 3
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  4. 4
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  5. 5
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.