In watsonx.data; a BI analyst role requires read-only access to Gold-layer tables for reporting. Which privilege assignment is correct?

Least-privilege access for BI consumers means granting only SELECT on the specific schemas they need; INSERT; UPDATE; and DDL privileges should be withheld to prevent accidental data modification. The incorrect options ("Assign Manager IAM role to give full administrative control including write access", "Assign Writer IAM role which automatically restricts access to read operations only", "No privileges are needed; all users have SELECT access to all tables by default") are distractors that don't fully capture the concept described.