ASSOCIATE-CLOUD-ENGINEER · Question #227
You are managing a Data Warehouse on BigQuery. An external auditor will review your company's processes, and multiple external consultants will need view access to the data. You need to provide them w
The correct answer is D. Create a Google Group that contains the consultants, and grant the group the role of BigQuery. To provide view access for multiple external consultants while following Google-recommended practices, a Google Group should be created, and the appropriate BigQuery viewer role should be granted to the group.
Question
Options
- AGrant each individual external consultant the role of BigQuery Editor
- BGrant each individual external consultant the role of BigQuery Viewer
- CCreate a Google Group that contains the consultants and grant the group the role of BigQuery
- DCreate a Google Group that contains the consultants, and grant the group the role of BigQuery
How the community answered
(42 responses)- A2% (1)
- C5% (2)
- D93% (39)
Why each option
To provide view access for multiple external consultants while following Google-recommended practices, a Google Group should be created, and the appropriate BigQuery viewer role should be granted to the group.
Granting the BigQuery Editor role provides excessive permissions beyond just 'view access' and violates the principle of least privilege.
While BigQuery Viewer provides appropriate permissions, granting it to each individual consultant is less scalable and harder to manage for multiple users compared to using a Google Group.
Creating a Google Group is correct, but the role 'BigQuery' is incomplete; it should specify a viewer role for appropriate permissions.
Creating a Google Group for the consultants and assigning a BigQuery viewer role (e.g., BigQuery Data Viewer) to the group is a recommended practice for managing access for multiple users, as it centralizes permission management and adheres to the principle of least privilege.
Concept tested: IAM roles for groups and least privilege in BigQuery
Source: https://cloud.google.com/bigquery/docs/access-control
Topics
Community Discussion
No community discussion yet for this question.