QuestionQ132

Integrating applications with Google Cloud services

Your company has a BigQuery dataset called "Master" that stores employee travel and expense information. The information is arranged by employee department, so employees must be able to view only the information for their own department. You want to apply a security framework that enforces this requirement with the fewest steps.

What should you do?

  • A Create a separate dataset for each department. Create a view with an appropriate WHERE clause to select records from a particular dataset for the specific department. Authorize this view to access records from your Master dataset. Give employees the permission to this department-specific dataset.
  • B Create a separate dataset for each department. Create a data pipeline for each department to copy appropriate information from the Master dataset to the specific dataset for the department. Give employees the permission to this department-specific dataset.
  • C Create a dataset named Master dataset. Create a separate view for each department in the Master dataset. Give employees access to the specific view for their department.
  • D Create a dataset named Master dataset. Create a separate table for each department in the Master dataset. Give employees access to the specific table for their department.
Explanation

BigQuery authorized views let specific users or groups query a defined subset of data without receiving access to the underlying source dataset. A department-specific view with a WHERE filter, authorized to read the Master dataset and shared through a department dataset, restricts each department to its own rows without duplicating the data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!