Your company handles data processing for a number of different clients. Each client prefers to use their own suite of analytics tools, with some allowing direct query access via Google BigQuery. You need to secure the data so that clients cannot see each other's data. You want to ensure appropriate access to the data.
Which three steps should you take? (Choose three.)

A. Load data into different partitions. B. Load data into a different dataset for each client. C. Put each client's BigQuery dataset into a different table. D. Restrict a client's dataset to approved users. E. Only allow a service account to access the datasets. F. Use the appropriate identity and access management (IAM) roles for each client's users.