You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

Question

Quizplus · Accepted Answer

The "project owner" role grants full access to a project, including the ability to grant other roles. The "bigquery.dataViewer" role grants read-only access to BigQuery datasets. By giving the "project owner" role to crm-databases-proj and the "bigquery.dataViewer" role to web-applications, you can grant the VMs in the web-applications project access to the BigQuery datasets in crm-databases-proj without giving them full access to either project.

You Are Configuring Service Accounts for an Application That Spans