Examkin

Question

Difficulty: EasyCreating Billing Budgets, Alerts, and BigQuery Exports

An organization wants to configure a daily export of detailed Cloud Billing data to a BigQuery dataset located in a dedicated cost-management project. A cloud engineer is assigned to set up this export. Which IAM roles must be granted to the cloud engineer to successfully configure the Cloud Billing export to BigQuery?

  1. Billing Account Administrator (or Billing Account Costs Manager) on the Cloud Billing account, and BigQuery Data Editor (or BigQuery Admin) on the target project containing the BigQuery dataset.Answer
  2. B
    Project Owner on the target project containing the BigQuery dataset, without any IAM roles granted on the Cloud Billing account.
  3. C
    Billing Account Viewer on the Cloud Billing account, alongside a Cloud Billing Budget threshold rule configured to trigger an automated export action.
  4. D
    Billing Account User on the Cloud Billing account, provided the BigQuery API is enabled in the organization's central billing service project rather than the target project.

Answer

Granting the Billing Account Administrator (or Billing Account Costs Manager) role on the Cloud Billing account and the BigQuery Data Editor (or BigQuery Admin) role on the target project containing the BigQuery dataset.
To set up a Cloud Billing export to BigQuery, an administrator needs dual-level permissions: permission to read/export billing settings on the Cloud Billing account (Billing Account Administrator or Billing Account Costs Manager) AND permission to write to the destination BigQuery dataset in the target project (BigQuery Data Editor or BigQuery Admin).

Step-by-Step Solution

1
Identify the required permissions on the Cloud Billing account resource level.
Configuring export options requires admin or cost management access on the Cloud Billing account (e.g., Billing Account Administrator or Billing Account Costs Manager).
Cloud Billing export is a billing account setting, so project-level access alone is insufficient.
2
Identify the required permissions on the target Google Cloud project hosting the BigQuery dataset.
Creating tables and writing exported cost data requires BigQuery Data Editor or BigQuery Admin role on the target project/dataset.
The user establishing the export link must have rights to write to the destination dataset.

Key Concept

BigQuery Billing Export IAM Permissions
Estimated Time:50s
Rate this question

Topics

Creating Billing Budgets, Alerts, and BigQuery Exports

More questions from this topic