BigQuery Job User - With IAM Condition

[ector_luiz]

I need to grant a user permission to execute queries in my project, but I also need to restrict them from using my project as a billing project and executing queries on BigQuery tables stored in other projects.

I added the 'BigQuery Job User' permission in IAM and added an IAM condition filtering by resource.name that starts with 'projects/MY_PROJECT_ID', but it's not working. The user still can't execute queries. Is there any way to restrict this access for the user so they can execute queries in my project, but cannot use it as a billing project or execute queries on BigQuery tables stored in other projects?

Regards...