You are configuring a new application that has access to an existing Cloud Spanner database. The new application reads from this database to gather statistics for a dashboard. You want to follow Google-recommended practices when granting Identity and Access Management (IAM) permissions. What should you do?
Select an option, then click Submit answer.
-
○
Reuse the existing service account that populates this database.
-
○
Create a new service account, and grant it the Cloud Spanner Database Admin role.
-
○
Create a new service account, and grant it the Cloud Spanner Database Reader role.
-
○
Create a new service account, and grant it the spanner.databases.select permission.