You are a data analyst working with sensitive customer data in BigQuery. You need to ensure that only authorized personnel within your organization can query this data, while following the principle of least privilege. What should you do?

A. Enable access control by using IAM roles. B. Encrypt the data by using customer-managed encryption keys (CMEK). C. Update dataset privileges by using the SQL GRANT statement. D. Export the data to Cloud Storage, and use signed URLs to authorize access.