Skip to main content

🔄 BigQuery Integration: Fixing the "invalid_grant" Reauthentication Issue

Romulo Gomes avatar
Written by Romulo Gomes
Updated over 2 weeks ago

If you're seeing an invalid_grant error when trying to sync BigQuery data with Easy App Reports—especially after the first day of setup—you’re not alone. This issue is often caused by a Google Workspace reauthentication policy that forces the integration to expire every 16 hours by default.

The good news: this behavior can be fixed with a quick update in your Google Workspace admin settings.


🧩 What's Causing the Problem?

Google Workspace enforces a Reauthentication Policy for third-party apps. The default setting is:

  • Require reauthentication every 16 hours

This means that even if your BigQuery connection was working yesterday, it may be disconnected today unless you reauthenticate manually.


✅ Two Ways to Solve It

To keep your Easy App Reports integration with BigQuery stable, you can ask your Google Workspace admin to take one of the following actions:

Option 1: Exempt Easy App Reports as a Trusted App (Recommended)

This keeps reauthentication enabled for other apps, but makes an exception for Easy App Reports. Step-by-step instructions:

  1. In the left-hand menu, navigate to:
    Security > Overview > Reauthentication Settings

  2. Set the policy to: Exempt trusted apps

  3. In the left-hand menu, click on:
    Security > Access and data control > API controls

  4. Click "Manage Third-Party App Access";

  5. In the search box, Search for "Easy App Reports";

  6. Click Select, then choose "Trusted" as the access level;

  7. Save changes.

Now, Easy App Reports will be trusted and won’t require reauthentication unless you change the policy again.


Option 2: Set Reauthentication Policy to “Never Require Reauthentication”

This disables reauthentication for all third-party apps—only recommended if you trust your entire app ecosystem.

Step-by-step instructions:

  1. In the left-hand menu, navigate to:
    Security > Overview > Reauthentication Settings

  2. Choose the appropriate organizational unit (OU)

  3. Set the policy to: Never require reauthentication

  4. Click Save

This will stop Google from invalidating third-party app tokens, including Easy App Reports.


🧪 How to Confirm It’s Working

  • After applying either fix, reconnect your BigQuery integration inside Easy App Reports (if needed)

  • Wait 24 hours — if the sync continues without error, the issue is resolved


📩 Need Help?

If you’re unsure about the process or don’t have access to Google Admin settings, share this page with your IT administrator.
Still stuck? Reach out to our support team at [email protected]

Did this answer your question?