Google Cloud Associate Cloud Engineer — Question 74

Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

Answer options

• A. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
• B. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
• C. Create a custom role by removing delete permissions, and add users to that role only.
• D. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.

Correct answer: D

Explanation

The correct answer is D because creating a custom role that removes delete permissions and assigning users through a group allows for better management and scalability. Option A and B do not provide sufficient permissions for querying datasets, while C does not utilize the benefits of group management, making D the most effective and recommended solution.