Google
ASSOCIATE-CLOUD-ENGINEER · Question #161
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in…
The correct answer is D. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications. bigquery.dataViewer should be assigned to the group of analysts in the crm-databases-proj https://cloud.google.com/bigquery/docs/access-control- examples#read_access_to_data_in_a_different_project
Submitted by tunde_lagos· Mar 30, 2026Configuring access and security
Question
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web- applications project. What should you do?
Options
- AGive "project owner" for web-applications appropriate roles to crm-databases- proj
- BGive "project owner" role to crm-databases-proj and the web-applications project.
- CGive "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-
- DGive bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
How the community answered
(16 responses)- A6% (1)
- B6% (1)
- C19% (3)
- D69% (11)
Explanation
bigquery.dataViewer should be assigned to the group of analysts in the crm-databases-proj https://cloud.google.com/bigquery/docs/access-control- examples#read_access_to_data_in_a_different_project
Topics
#service accounts#cross-project access#IAM least privilege#BigQuery permissions
Community Discussion
No community discussion yet for this question.