Google
ASSOCIATE-CLOUD-ENGINEER · Question #125
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team w
The correct answer is D. Add your SREs to a group and then add this group to roles/accessapproval approver role.. Google recommended practices lead us to use groups rather than granting each individual SRE
Submitted by joshua94· Mar 30, 2026Configuring access and security
Question
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?
Options
- AAdd your SREs to roles/iam.roleAdmin role.
- BAdd your SREs to roles/accessapproval approver role.
- CAdd your SREs to a group and then add this group to roles/iam roleAdmin role.
- DAdd your SREs to a group and then add this group to roles/accessapproval approver role.
How the community answered
(35 responses)- A3% (1)
- B9% (3)
- C3% (1)
- D86% (30)
Explanation
Google recommended practices lead us to use groups rather than granting each individual SRE
Topics
#Access Approval#IAM roles#support access#groups best practice
Community Discussion
No community discussion yet for this question.