You can now use deny policies to define deny rules that prevent selected principals from using certain permissions, regardless of the roles they're granted

## Feature You can now use [deny policies](https://cloud.google.com/bigquery/docs/control-access-to-resources-iam#deny%5Faccess%5Fto%5Fa%5Fresource) to define deny rules that prevent selected principals from using [certain permissions](https://cloud.google.com/iam/docs/deny-permissions-support), regardless of the roles they're granted. This feature is in [preview](https://cloud.google.com/products#product-launch-stages).