Which of the following is not possible using primitive roles?

Which of the following is not possible using primitive roles?
A . Give a user viewer access to BigQuery and owner access to Google Compute Engine instances.
B . Give UserA owner access and UserB editor access for all datasets in a project.
C . Give a user access to view all datasets in a project, but not run queries on them.
D . Give GroupA owner access and GroupB editor access for all datasets in a project.

Answer: C

Explanation:

Primitive roles can be used to give owner, editor, or viewer access to a user or group, but they can’t be used to separate data access permissions from job-running permissions. Reference: https://cloud.google.com/bigquery/docs/access-control#primitive_iam_roles