I've linked an external party to my Google BigQuery instance through an API key. How can I control how much of my data they're able to see?

Question

I have a database in Google BigQuery that contains confidential client data. My team\'s recently partnered with a 3rd-party data provider who will feed real-time data into o