Configure Secure Bi Connection Bigquery Rls Iam

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

Your enterprise stores sensitive sales and customer data in BigQuery. The dataset implements row-level security (RLS) to restrict sales data access based on each manager's region (SESSION_USER()), along with column-level security policy tags to mask personally identifiable information (PII).

You need to configure access for business intelligence (BI) visualization dashboards in Looker Studio so that multiple regional sales managers can view their respective metrics securely while strictly adhering to the principle of least privilege.

Which configuration should you implement?

Generate a JSON service account key with the BigQuery Data Viewer role, embed the key directly into the visualization tool connection string, and grant managers the BigQuery User role.

Configure the visualization data source to use Viewer's (OAuth) credentials, grant each manager the BigQuery Job User role on the query project, and grant the BigQuery Data Viewer role on the specific dataset.

Configure the visualization data source to use Viewer's credentials, and assign the basic Project Viewer role to the sales managers at the Google Cloud project level.

Configure the visualization data source to use Owner's credentials backed by a user-managed service account, and assign the BigQuery Admin role to the service account.

Professional Cloud Data Engineer

Configure Secure Bi Connection Bigquery Rls Iam

Related questions