When you add a user to your project you could choose to only allow them to see biq query, or they could "view" big query and be admin for cloudsql