Answer-first summary for fast verification
Answer: Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts,' and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.
The correct answer is A. In order to ensure that analysts can query the data relevant to their respective countries, the BigQuery jobUser role is required because it provides permissions to run jobs, including queries within the project. The datasets should then be shared with view access with each respective country-group. This approach ensures that analysts can only see and query data for their specific countries, meeting the requirement of limited data access. The BigQuery dataViewer role alone does not grant the ability to run queries, which is why jobUser is necessary.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
Your company captures all web traffic data in Google Analytics 360 and stores it in BigQuery, with each country having its own dataset containing multiple tables. To maintain data security and privacy, it is crucial that analysts from each country can only see and query the data specific to their own country. Given this requirement, how should you configure the access rights in BigQuery?
A
Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts,' and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.
B
Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts,' and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country-group.
C
Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts,' and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country-group.
D
Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts,' and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.