Answer-first summary for fast verification
Answer: Assign the compute.networkUser role to the service account that executes the Dataflow pipeline.
To enable a Dataflow pipeline to deploy on a Shared VPC network, the service account executing the pipeline must have the `compute.networkUser` role. This role provides the necessary permissions to use the network and subnetwork. The Dataflow service agent does not require direct network access, and administrative roles like `dataflow.admin` do not grant network permissions. Therefore, the correct action is to assign the `compute.networkUser` role to the service account that executes the Dataflow pipeline.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
When setting up a Dataflow pipeline to process data from Cloud Storage into BigQuery using a Shared VPC network, what is the correct approach to enable the pipeline's deployment on the Shared VPC network?
A
Assign the dataflow.admin role to the Dataflow service agent.
B
Assign the compute.networkUser role to the service account that executes the Dataflow pipeline.
C
Assign the dataflow.admin role to the service account that executes the Dataflow pipeline.
D
Assign the compute.networkUser role to the Dataflow service agent.