Google
ASSOCIATE-CLOUD-ENGINEER · Question #129
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the…
The correct answer is C. Add the users to a group, and add this group to roles/browser role. Google recommend groups and roles/browser provides Read access to browse the hierarchy for a project, including the folder, organization, and Cloud IAM policy. This role doesn't include permission to view resources in the project…
Submitted by mateo_ar· Mar 30, 2026Configuring access and security
Question
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?
Options
- AAdd the users to roles/browser role.
- BAdd the users to roles/iam.roleViewer role.
- CAdd the users to a group, and add this group to roles/browser role.
- DAdd the users to a group, and add this group to roles/iam.roleViewer role.
How the community answered
(22 responses)- A5% (1)
- B14% (3)
- C82% (18)
Explanation
Google recommend groups and roles/browser provides Read access to browse the hierarchy for a project, including the folder, organization, and Cloud IAM policy. This role doesn't include permission to view resources in the project. https://cloud.google.com/iam/docs/understanding-roles
Topics
#IAM browser role#organizational hierarchy#least privilege#groups best practice
Community Discussion
No community discussion yet for this question.