Configure Bigquery Authorized Views Least Privilege Access

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

Your enterprise data warehouse in BigQuery contains sensitive customer records stored in a base dataset named customer_master. A data analytics and visualization team needs to query aggregated summary metrics using a business intelligence (BI) dashboard without being granted direct read access to the underlying raw tables in customer_master.

You need to implement a secure, least-privilege architecture using BigQuery native controls that allows the BI team and their visualization tool to run these queries successfully.

Which combination of steps should you perform?

Create the analytical view in a separate dataset named customer_analytics. Authorize the view to access the customer_master dataset. Grant the BI team the roles/bigquery.user role on the project and the roles/bigquery.dataViewer role on the customer_analytics dataset.

Create the analytical view in a separate dataset named customer_analytics. Authorize the view to access customer_master. Grant the BI team the roles/bigquery.dataViewer role on both customer_master and customer_analytics.

Create the analytical view in the customer_master dataset. Grant the BI team the roles/bigquery.dataViewer role on customer_master and the roles/bigquery.jobUser role on the project.

Create the view in customer_analytics. Apply a row access policy on the base tables using GRANT TO ("group:bi-team@example.com") FILTER USING (TRUE). Grant the BI team roles/bigquery.dataOwner on customer_analytics.

Professional Cloud Data Engineer

Configure Bigquery Authorized Views Least Privilege Access

Related questions