You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items. How should you configure the auditor's permissions?

The correct answer is C. Select the built-in IAM project Viewer role. Add the user's account to this role. roles/Viewer role provides access to all resources under the projects but do not alter the state of these resources. https://cloud.google.com/resource-manager/docs/access-control-proj

Submitted by jordan8· Mar 30, 2026Configuring access and security

Question

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items. How should you configure the auditor's permissions?

Options

ACreate a custom role with view-only project permissions. Add the user's account to the custom
BCreate a custom role with view-only service permissions. Add the user's account to the custom
CSelect the built-in IAM project Viewer role. Add the user's account to this role.
DSelect the built-in IAM service Viewer role. Add the user's account to this role.

How the community answered

(22 responses)

A
5% (1)
C
95% (21)

Explanation

roles/Viewer role provides access to all resources under the projects but do not alter the state of these resources. https://cloud.google.com/resource-manager/docs/access-control-proj

Topics

#IAM roles#project Viewer role#least privilege#auditor access

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice