A streaming pipeline writes data to BigQuery. BI users must run custom SQL against the latest data. What should you do?

Assigning the BigQuery User IAM role to a Google Group containing the BI team members is the most secure and efficient way to grant access. This role allows users to query data, which is necessary for running custom SQL. Using a Google Group simplifies access management, as you only need to add or remove members from the group, rather than managing individual user permissions. Creating a Data Studio dashboard would provide a visual interface but wouldn't allow BI users to run custom SQL directly against the latest data. Creating a Service Account for the BI team and distributing private keys is a security risk and not a standard practice for end-user access. Using Cloud Scheduler to run a batch Dataflow job to copy data to an internal warehouse introduces latency and unnecessary complexity, as the BI team needs access to the latest data directly in BigQuery.