Question

A financial services company is granting Google Cloud access to a new analyst who only needs to view data in a specific BigQuery dataset. The security team wants to follow security best practices when assigning permissions. Which approach best aligns with the principle of least privilege?

Accepted Answer

Grant the analyst a predefined role that provides only view access to the specific dataset

Answer

Grant the analyst the project-level Owner role so they never encounter access issues

Answer

Add the analyst to a group that has the Editor role across all projects in the organization

Answer

Share the credentials of an existing service account that already has broad access