A BigQuery dataset named 'Master' contains rows for all departments. Enforce that employees see only their department's rows with the fewest steps. What's the recommended approach?

Creating a separate view for each department within the Master dataset is the most efficient approach. BigQuery views act as virtual tables, allowing you to define a specific subset of data (e.g., rows for a particular department) using a WHERE clause. You can then grant access to these views to the respective department's employees. This method avoids data duplication and complex data pipelines, as all data remains in the single Master dataset. Creating separate datasets or tables for each department would lead to data duplication and increased management overhead. While a separate dataset with a view could work, creating views directly within the Master dataset is simpler and more direct. Data pipelines to copy data are overly complex for this access control requirement.