Your company captures all web traffic data in Google Analytics 360 and stores it in BigQuery.
Each country has its own dataset.
Each dataset has multiple tables.
You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?
Click on the arrows to vote for the correct answer
A. B. C. D.A.
To configure access rights for analysts from each country to see and query only their respective country's data in Google Analytics 360 stored in BigQuery, the following steps can be taken:
Create a group per country: Create a separate Google Group for each country, such as "Country A Analysts," "Country B Analysts," etc.
Add analysts to their respective country-groups: Add the relevant analysts to each country group based on the country they are responsible for.
Create a single group "all_analysts": Create a single group called "all_analysts" and add all the country groups as members.
Grant IAM role of BigQuery jobUser to "all_analysts" group: In the Google Cloud IAM (Identity and Access Management) console, assign the IAM role of "BigQuery jobUser" to the "all_analysts" group. This allows members of this group to run queries on BigQuery.
Share the appropriate dataset with view access with each respective analyst country-group: Share the dataset for each country with the relevant country group, granting them view access only. This will ensure that analysts from each country can see and query only their own country's data.
Therefore, the correct answer is A. Create a group per country. Add analysts to their respective country-groups. Create a single group all_analysts, and add all country-groups as members. Grant the all_analysts group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.