Google Professional Data Engineer Question 180
Single answerGoogle Cloud PlatformYour organization stores data in BigQuery and recently started using Looker Studio for business intelligence reporting. However, users are facing issues connecting Looker Studio to BigQuery due to missing permissions. Which IAM role should you assign to the users to resolve this issue while adhering to the principle of least privilege?
- A
roles/bigquery.dataViewer
- B
roles/bigquery.jobUser
- C
roles/bigquery.admin
- D
roles/viewer
Show answer and explanation
Correct answer: A
Explanation
To allow Looker Studio to connect to BigQuery and retrieve data, users need the ability to read the data. The roles/bigquery.dataViewer role provides the necessary permissions to view BigQuery dataset data while adhering to the principle of least privilege. Assigning broader roles such as roles/bigquery.admin or roles/viewer would grant unnecessary permissions or not fulfill the requirements, respectively.
- A. Correct.
Correct! The roles/bigquery.dataViewer role allows users to read data from BigQuery datasets, which is necessary for Looker Studio to query and display the data.
- B. Incorrect.
Incorrect. The roles/bigquery.jobUser role is typically used to allow users to run query jobs but does not grant permission to view the underlying data.
- C. Incorrect.
Incorrect. The roles/bigquery.admin role grants full administrative access to BigQuery, which exceeds the permissions required and violates the principle of least privilege.
- D. Incorrect.
Incorrect. The roles/viewer role only provides read access to metadata and does not allow querying dataset data in BigQuery, which is required here.