Explanation:
Primitive roles are designed to assign owner, editor, or viewer access to users or groups. However, they do not support the separation of data access permissions from job-running permissions. This limitation means that you cannot grant a user the ability to view datasets without also allowing them to run queries. For more details, refer to the official documentation: https://cloud.google.com/bigquery/docs/access-control#primitive_iam_roles.
Ultimate access to all questions.
No comments yet.
Which of the following scenarios is not achievable with primitive roles in Google Cloud?
A
Grant a user the ability to view datasets in a project without the permission to execute queries on them.
B
Assign UserA as the owner and UserB as the editor for all datasets within a project.
C
Provide a user with viewer access to BigQuery and owner access to Google Compute Engine instances.
D
Designate GroupA as the owner and GroupB as the editor for all datasets in a project.