A healthcare analytics team keeps all clinic visits in one BigQuery table. Each regional manager should see only their own region's rows, and the team does not want copies of the table. Which DDL statement defines that restriction on the table itself?
Show answer and explanation
Answer: C
A row access policy is created with CREATE ROW ACCESS POLICY and attached to a table. Its filter predicate decides which rows a querying principal can see, for example by comparing a region column against the user's assignment. Principals not matched by any policy see no rows from the table. Materialized views create precomputed copies rather than policies on the base table, dataset-level grants are too broad, and ALTER TABLE SET OPTIONS changes table settings such as expiration.
Why the other options are wrong
- A. A materialized view stores precomputed query output as a separate object. It would need a copy per manager and does not restrict who reads the base table.
- B. Granting read access on a dataset gives broad access to its tables. It does not hide individual rows based on who is querying.
- D. ALTER TABLE SET OPTIONS changes table properties such as description or expiration. It does not attach a row-level filter to the table.