All data is in BigQuery tables. Multiple teams should only be able to see specific tables based on team membership. How do you grant access?

The most straightforward and efficient method to grant team-specific table access in BigQuery is to assign users or groups the dataViewer role directly to the relevant tables. This role provides read-only access to the table's data and metadata, fulfilling the requirement for teams to "see specific tables." Creating SQL views or authorized views for each team, while technically possible, introduces unnecessary complexity and overhead. SQL views don't offer additional security layers beyond the underlying tables, and authorized views are primarily for row-level or column-level security, which isn't specified as a requirement here. Using separate datasets for authorized views also adds management burden without clear benefits for simple table-level access control.