What should you do?

You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account. The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset.

What should you do?
A . Ask the other team to grant your default App Engine Service account the role of BigQuery Job User.
B . Ask the other team to grant your default App Engine Service account the role of BigQuery Data Viewer.
C . In Cloud IAM of your project, ensure that the default App Engine service account has the role of BigQuery Data Viewer.
D . In Cloud IAM of your project, grant a newly created service account from the other team the role of BigQuery Job User in your project.

Answer: B

Explanation:

The resource that you need to get access is in the other project.

roles/bigquery.dataViewer BigQuery Data Viewer

When applied to a table or view, this role provides permissions to:

Read data and metadata from the table or view.

This role cannot be applied to individual models or routines.

When applied to a dataset, this role provides permissions to:

Read the dataset’s metadata and list tables in the dataset.

Read data and metadata from the dataset’s tables.

When applied at the project or organization level, this role can also enumerate all datasets in the project. Additional roles, however, are necessary to allow the running of jobs.