Your analytics team has created an external BigQuery table that references Parquet files stored in a Cloud Storage bucket owned by your project. You must make this dataset available to an external partner through an Analytics Hub listing so they can query the data from their own project. Corporate policy strictly prohibits granting the partner any IAM role on the Cloud Storage bucket, and you want to avoid copying the data into native BigQuery tables. Which approach meets these requirements?
Generate signed URLs for the Cloud Storage objects and send them to the partner so they can create their own external table in their project.
Publish the existing external table in an Analytics Hub listing and rely on BigQuery's default proxy access without granting any additional permissions.
Schedule a daily batch job that loads the Parquet files into a native BigQuery table, then share that table through Analytics Hub with read permissions.
Convert the external table into a BigLake table, publish the dataset in an Analytics Hub listing, and grant the partner BigQuery read permissions on the shared table.
Sharing a standard external table that references Cloud Storage objects requires that every reader also have IAM permission (for example, storage.objectViewer) on the underlying bucket. Converting the external table to a BigLake table changes the access semantics: once the table is registered as a BigLake table, BigQuery's fine-grained authorization can serve queries without exposing the bucket itself. Publishing the containing dataset as an Analytics Hub listing lets the partner create a linked dataset in their own project. Granting them BigQuery-level read access (such as bigquery.dataViewer on the linked dataset or table) satisfies the requirement.
Keeping the external table as-is (without bucket access) would fail at query time, while loading the files into a native table would duplicate data and violate the "minimal data movement" constraint. Sharing signed URLs hands over direct object access and bypasses BigQuery entirely, violating policy and offering no centralized governance.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a BigLake table in BigQuery?
Open an interactive chat with Bash
What is an Analytics Hub in GCP?
Open an interactive chat with Bash
How does BigQuery's fine-grained authorization work?
Open an interactive chat with Bash
What is a BigLake table?
Open an interactive chat with Bash
How does Analytics Hub work for sharing datasets?
Open an interactive chat with Bash
Why is BigQuery fine-grained authorization useful?
Open an interactive chat with Bash
GCP Professional Data Engineer
Preparing and using data for analysis
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .