Professional Data Engineer

By Google · Question Mode

QuestionQ18

Preparing and using data for analysis

You have a BigQuery dataset called customers. All tables will be tagged using a Data Catalog tag template named gdpr. The template includes one mandatory Boolean field, has_sensitive_data.

All employees must be able to perform a simple search to locate tables in the dataset where has_sensitive_data is either true or false. However, only the Human Resources (HR) group must be able to view the data in tables where has_sensitive_data is true. You grant the all-employees group the bigquery.metadataViewer and bigquery.connectionUser roles on the dataset. You want to minimize configuration overhead. What should you do next?

Explanation

Public Data Catalog tags can be found by tag value with a simple search query and do not require separate tag-template access to appear with assets the user can view. The bigquery.metadataViewer role permits table metadata discovery but not table-data reads, while bigquery.dataViewer granted on individual tables permits reading those tables. Thus, make the template public and grant bigquery.dataViewer only to HR on the sensitive tables.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!