Manage Google BigQuery Connection on Streamlit Cloud

Hello! Love streamlit and am trying to get my org to use it.

We leverage BigQuery, and we’re trying to figure out how to safely use streamlit and we’ve run into a couple roadblocks.

Is there a way to create an org on streamlit cloud under one umbrella and add users to it? We would like to have the Google service account key saved as a secret across the org where all users could use the secret, but not view or edit it directly. Right now it seems like you would need to have each user add the service account key as a secret and do so for each individual app, which is something we aren’t comfortable with.

I’m guessing none of the above is currently possible, so any other creative solutions we could take? Is there maybe a way to have users perform interactive auth or something? Any other ideas?

Thanks!
Ricky