Which of the following is not possible using primitive roles?

The correct answer is C. Give a user access to view all datasets in a project, but not run queries on them. Explanation/Reference: Primitive roles can be used to give owner, editor, or viewer access to a user or group, but they can't be used to separate data access permissions from job-running

Submitted by javi_es· Mar 30, 2026Designing data processing systems

Question

Which of the following is not possible using primitive roles?

Options

AGive a user viewer access to BigQuery and owner access to Google Compute Engine instances.
BGive UserA owner access and UserB editor access for all datasets in a project.
CGive a user access to view all datasets in a project, but not run queries on them.
DGive GroupA owner access and GroupB editor access for all datasets in a project.

How the community answered

(59 responses)

A
17% (10)
B
3% (2)
C
73% (43)
D
7% (4)

Explanation

Explanation/Reference: Primitive roles can be used to give owner, editor, or viewer access to a user or group, but they can't be used to separate data access permissions from job-running

Topics

#primitive roles#IAM#BigQuery permissions#access control

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-DATA-ENGINEER Practice