Google PCA Designing for Security and Compliance Practice Question
A company needs to grant a data scientist read-only access to BigQuery datasets in the project 'analytics-prod' without granting permissions to any other resources. Which IAM role should be assigned at the project level?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
roles/bigquery.dataViewer
The BigQuery Data Viewer role (roles/bigquery.dataViewer) grants read access to BigQuery datasets and tables. Assigning at the project level applies to all datasets in that project.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
roles/viewer
Why it's wrong here
Primitive Viewer includes read access to many resources, but may grant unintended read access to other services.
- ✗
roles/bigquery.user
Why it's wrong here
BigQuery User includes permission to run queries but also requires data access; it is broader than Data Viewer.
- ✓
roles/bigquery.dataViewer
Why this is correct
BigQuery Data Viewer grants read-only access to datasets and tables.
- ✗
roles/bigquery.jobUser
Why it's wrong here
BigQuery JobUser allows running jobs but does not grant data access.
Go deeper
Related to this question
Learn chapter
Identity and Access Management (IAM)
Key term
BigQuery
BigQuery is a fully managed, serverless data warehouse on Google Cloud that lets you run fast SQL queries on massive datasets without managing any infrastructure.
Key term
IAM role
An IAM role is a set of permissions that an entity can assume temporarily to access cloud resources securely.
About these practice questions
One of 955 original PCA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCA practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCA exam.