Answer-first summary for fast verification
Answer: Grant a user the ability to view datasets in a project without the permission to execute queries on them.
Primitive roles are designed to assign owner, editor, or viewer access to users or groups. However, they do not support the separation of data access permissions from job-running permissions. This limitation means that you cannot grant a user the ability to view datasets without also allowing them to run queries. For more details, refer to the official documentation: [https://cloud.google.com/bigquery/docs/access-control#primitive_iam_roles](https://cloud.google.com/bigquery/docs/access-control#primitive_iam_roles).
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Which of the following scenarios is not achievable with primitive roles in Google Cloud?
A
Grant a user the ability to view datasets in a project without the permission to execute queries on them.
B
Assign UserA as the owner and UserB as the editor for all datasets within a project.
C
Provide a user with viewer access to BigQuery and owner access to Google Compute Engine instances.
D
Designate GroupA as the owner and GroupB as the editor for all datasets in a project.
No comments yet.