title: Creating a Compute Engine instance for managing BigQuery in Google Cloud
body: <p>I need a VM to load data into an existing BigQuery table.</p>
  
  <p>I create a new Compute Engine with:</p>
  
  <ol>
  <li>The scope having access to all Cloud APIs</li>
  <li>Default service account (auto-generated name <code>...-compute@developer.gserviceaccount.com</code>)</li>
  <li>This service account having "Editor" permissions in the project</li>
  </ol>
  
  <p>This VM allows me to read BQ with <code>bq ls</code>, but when I try editing with <code>bq rm &lt;dataset&gt;</code>, it says</p>
  
  <pre><code>...-compute@developer.gserviceaccount.com does not have permission to delete dataset
  </code></pre>
  
  <p>What is wrong? Is it possible to give the full access to BQ to the instance, like the one Cloud Shell has?</p>
  
  <p>Or the VM should authenticate as described here: <a href="https://stackoverflow.com/questions/26031492/how-to-auth-into-bigquery-on-google-compute-engine">How to auth into BigQuery on Google Compute Engine?</a>?</p>