Primitive roles in GCP are designed to assign owner, editor, or viewer access to users or groups. However, they lack the granularity to differentiate between data access permissions and the permissions to run jobs. This limitation means that specific access controls, such as separating dataset viewing from query execution permissions, cannot be configured using primitive roles. For more detailed access control, it's recommended to use predefined or custom IAM roles. Reference: Google Cloud BigQuery Access Control