ASSOCIATE-CLOUD-ENGINEER · Question #105
ASSOCIATE-CLOUD-ENGINEER Question #105: Real Exam Question with Answer & Explanation
The correct answer is C: Select the built-in IAM project Viewer role. Add the user's account to this role.. roles/Viewer role provides access to all resources under the projects but do not alter the state of these resources. https://cloud.google.com/resource-manager/docs/access-control-proj
Question
You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items. How should you configure the auditor's permissions?
Options
- ACreate a custom role with view-only project permissions. Add the user's account to the custom
- BCreate a custom role with view-only service permissions. Add the user's account to the custom
- CSelect the built-in IAM project Viewer role. Add the user's account to this role.
- DSelect the built-in IAM service Viewer role. Add the user's account to this role.
Explanation
roles/Viewer role provides access to all resources under the projects but do not alter the state of these resources. https://cloud.google.com/resource-manager/docs/access-control-proj
Community Discussion
No community discussion yet for this question.