You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access...

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

A. Give "project owner" for web-applications appropriate roles to crm-databases- proj B. Give "project owner" role to crm-databases-proj and the web-applications project. C. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications. D. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.