Question

A data analyst on your team needs to run queries in BigQuery and view existing datasets in a specific project, but must not be able to delete datasets, modify IAM policies, or create new datasets. Your company enforces the principle of least privilege. Which approach best satisfies this requirement?

Accepted Answer

Grant the analyst the predefined roles/bigquery.dataViewer and roles/bigquery.jobUser roles at the project level.

Answer

Grant the analyst the roles/bigquery.admin role at the project level.

Answer

Grant the analyst the basic roles/editor role at the project level.

Answer

Grant the analyst the roles/owner role scoped to the specific dataset.