GCP Professional Data Engineer Practice Question

Your company subscribes to an external healthcare benchmark dataset through BigQuery Analytics Hub. You have built a Looker Studio dashboard that joins the linked dataset with your internal patient‐outcome tables. Compliance rules prohibit you from granting the external data provider any access to your BigQuery project or tables, but business stakeholders want to give the provider view-only access to the finalized dashboard so they can compare performance. What is the most efficient way to let the provider see the dashboard while keeping your BigQuery resources private and avoiding data duplication?

Create a new GCP project, copy the linked dataset and internal tables there, grant the provider BigQuery read access, and rebuild the dashboard in that project.
Export the dashboard data to CSV files in Cloud Storage and give the provider read access to the bucket instead of sharing the report.
Grant the provider's Google group the BigQuery Data Viewer role on both the linked dataset and your internal datasets, and share the dashboard.
Configure the Looker Studio data sources to use the report owner's credentials, then share the dashboard with the provider as view-only; do not grant the provider any BigQuery IAM roles.

Report Issue

Answer Description

Looker Studio lets a report's data sources run with the report owner's BigQuery credentials instead of the viewer's. If you configure the BigQuery connections in the dashboard to use owner's credentials and then share the Looker Studio report in view-only mode with the provider's Google identities, the provider can open the report in their browser. Queries still execute in your project under your billing account, so the provider never needs direct IAM access to the linked dataset or to your internal tables, and no data is copied. Other options either violate the requirement to keep BigQuery access private (granting dataset roles), duplicate data (exporting CSVs), or add unnecessary infrastructure (moving data to a separate project).

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.