nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #116

Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make

The correct answer is C. Add all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and. BigQuery User: (roles/bigquery.user) When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A princ

Submitted by daniela_cl· Mar 30, 2026Designing for security and compliance

Question

Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make sure that no query costs are incurred on the projects that contain the data. Users should be able to query the datasets, but not edit them. How should you configure users' access roles?

Options

  • AAdd all users to a group. Grant the group the role of BigQuery user on the billing project and
  • BAdd all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project
  • CAdd all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and
  • DAdd all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project

How the community answered

(23 responses)
  • A
    22% (5)
  • B
    13% (3)
  • C
    57% (13)
  • D
    9% (2)

Explanation

BigQuery User: (roles/bigquery.user) When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A principal with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. <b>Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role(roles/bigquery.dataOwner) on these new datasets.</b> Lowest-level resources where you can grant this role: Dataset BigQuery Job User: (roles/bigquery.jobUser) Provides permissions to run jobs, including queries, within the project. Lowest-level resources where you can grant this role: Project Source: https://cloud.google.com/bigquery/docs/access-control

Topics

#BigQuery IAM#jobUser role#dataViewer role#billing project

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice