You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

A、 Give
project owner
for web-applications appropriate roles to crm-databases-proj.
B、 Give
project owner
role to crm-databases-proj and the web-applications project.
C、 Give
project owner
role to crm-databases-proj and bigquery.dataViewer role to web-applications.
D、 Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.