A data team needs to ensure that only approved users can access personally identifiable information (PII) in a BigQuery dataset. However, analysts still need to query the dataset for trends and aggregated values without seeing raw PII fields. What is the most appropriate approach using Google Cloud-native capabilities?