Exam Associate Cloud Engineer topic 1 question 178 discussion

D is correct roles/bigquery.user When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A member with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role (roles/bigquery.dataOwner) on these new datasets.

Why on the earth would the answer be C? It has no relevance to the question. The answer is D, hands down

Bad question. Option D is the best answer (of all the options), but it doesn't give the Custom role to run SQL queries against their data in BigQuery. If you are in doubt, check what the BigQuery User role allows.

D is the right answer, just assign them the role by IAM and they will be able to use BQ

D is correct

makes mor sense

D is correct because google recommendations are always to privilege groups to individual accounts and this is what can make the users query the database unlike the Data Studio

D is right

D is correct

D is the answer Hint - to **run the custom SQL queries*** against the latest data in BigQuery

C is correct, data pipeline is the key: https://cloud.google.com/dataflow/docs/guides/data-pipelines#create_a_batch_data_pipeline To create this sample batch data pipeline, you must have access to the following resources in your project: A Cloud Storage bucket to store input and output files A BigQuery dataset where you will create a table.

Answer: D The simplest. It is not requested to automate the query. The BI team may also need to modify their query or have several different ones to meet the needs.

D is correct https://cloud.google.com/bigquery/docs/access-control

D sounds perfect with minimal steps. Quote from the GCP docs: "BigQuery User (roles/bigquery.user) When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A principal with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role (roles/bigquery.dataOwner) on these new datasets."

Answer is C Option C says, there is a probability of an internal BI datawarehouse. Before providing the iam permissions, it is better to copy data to internal BI. My view

agree With D

maybe D is not sufficient because, as per documentation: "Note: For a user to be able to query the tables in a dataset, it is not sufficient for the user to have access to the dataset. A user must also have permission to run a query job in a project. If you want to give a user permission to run a query from your project, give the user the bigquery.jobs.create permission for the project. You can do this by assigning the user the roles/bigquery.jobUser role for your project. For more information, see Access control examples".