Google Professional Data Engineer
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
You are tasked with designing an efficient data mesh architecture on Google Cloud, leveraging Dataplex to manage data across BigQuery and Cloud Storage. The goal is to streamline the assignment of permissions for data assets within this architecture. You are establishing a virtual data lake for a customer, which involves two distinct user groups with specific access requirements: • Data engineers, who need comprehensive access to the entire data lake. • Analytic users, who need access exclusively to curated datasets. Your objective is to assign the appropriate access rights to these user groups. What steps should you take to accomplish this?
Explanation:
Option A is the correct answer because it assigns the dataplex.dataOwner role to the data engineer group on the customer data lake, providing full control over the data assets. It also assigns the dataplex.dataReader role to the analytic user group on the customer curated zone, allowing them to read the data but not modify it. These roles directly map to the corresponding data roles for BigQuery and Cloud Storage, simplifying the permission assignments.