Google Cloud Associate Cloud Engineer — Question 139

You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account.
The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset. What should you do?

Answer options

• A. Ask the other team to grant your default App Engine Service account the role of BigQuery Job User.
• B. Ask the other team to grant your default App Engine Service account the role of BigQuery Data Viewer.
• C. In Cloud IAM of your project, ensure that the default App Engine service account has the role of BigQuery Data Viewer.
• D. In Cloud IAM of your project, grant a newly created service account from the other team the role of BigQuery Job User in your project.

Correct answer: B

Explanation

The correct answer is B because the BigQuery Data Viewer role allows your App Engine Service account to read data from the dataset. Option A is incorrect as the BigQuery Job User role does not provide access to read data, only to run jobs. Option C does not help because adjusting permissions in your project does not grant access to another project's dataset. Option D is also incorrect as it involves granting roles to a service account from another team, which does not address the need for your own service account to access the data.