nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #371

You are managing a set of Google Cloud projects that are contained in a folder named Data Warehouse. A new data analysis team has been approved to perform data analysis for all BigQuery data in the…

The correct answer is B. Grant the BigQuery Data Viewer role at the Data Warehouse folder. Granting the BigQuery Data Viewer role at the folder level provides the data analysis team read- only access to all BigQuery data across every project within the Data Warehouse folder, without needing to manage permissions individually per project or dataset. This approach…

Submitted by suresh_in· Apr 18, 2026Configuring access within a cloud solution environment

Question

You are managing a set of Google Cloud projects that are contained in a folder named Data Warehouse. A new data analysis team has been approved to perform data analysis for all BigQuery data in the projects within the Data Warehouse folder. They should only be able to read the data and not have permissions to modify or delete the data. You want to reduce the operational overhead of provisioning access while adhering to the principle of least privilege. What should you do?

Options

  • AGrant the BigQuery Data Viewer role at the project level for each project within the Data
  • BGrant the BigQuery Data Viewer role at the Data Warehouse folder.
  • CGrant the BigQuery Data Viewer role at the dataset level for each BigQuery dataset within each
  • DGrant the BigQuery Metadata Viewer role at the Data Warehouse folder.

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    82% (40)
  • C
    10% (5)
  • D
    6% (3)

Explanation

Granting the BigQuery Data Viewer role at the folder level provides the data analysis team read- only access to all BigQuery data across every project within the Data Warehouse folder, without needing to manage permissions individually per project or dataset. This approach enforces the principle of least privilege and minimizes operational overhead.

Topics

#IAM#BigQuery access control#Folder inheritance#Least privilege

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice