
Ultimate access to all questions.
Your company has recently established a new data analytics team. The team includes data analysts who need to read from and write to Cloud Storage, as well as query data from BigQuery. Additionally, data engineers within the team are required to create Cloud Storage buckets and set data lifecycle management policies. Adhering to Google Cloud's recommended best practices, how should you manage access permissions for this team?
A
Assign roles individually to each user, giving data engineers the same roles as data analysts plus any additional roles necessary for their extra duties.
B
Form a single group for the entire data analytics team, granting this group all the roles required by both data analysts and data engineers, and include all team members in this group.
C
Establish two separate groups: one for data analysts and another for data engineers. Assign data analysts to the data analyst group and data engineers to the data engineer group. Then, grant each group only the roles they need to perform their specific job functions.
D
Provide roles to each user on an individual basis, assigning to data engineers and data analysts all roles that either role might need.