You Are Configuring Service Accounts for an Application That Spans

Multiple Choice

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

A) Give "project owner" for web-applications appropriate roles to crm-databases- proj
B) Give "project owner" role to crm-databases-proj and the web-applications project.
C) Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.
D) Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.