Ultimate access to all questions.
You are managing a BigQuery dataset named "customers" which will use a Data Catalog tag template named "gdpr" to organize its tables. The gdpr tag template includes a mandatory field called "has_sensitive_data" with a boolean value (true/false). The requirement is that all employees must be able to perform a simple search to locate tables based on the "has_sensitive_data" field. Additionally, only the Human Resources (HR) group should have the ability to view the data within the tables where "has_sensitive_data" is true. The all employees group has already been granted the bigquery.metadataViewer and bigquery.connectionUser roles for the dataset. Your objective is to achieve this with minimal configuration overhead. What should you do next?