Google
ASSOCIATE-CLOUD-ENGINEER · Question #13
You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project calle
The correct answer is C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.. You create the service account in proj-sa and take note of the service account email, then you go to proj-vm in IAM > ADD and add the service account's email as new member and give it the Compute Storage Admin role.
Submitted by parkjh· Mar 30, 2026Configuring access and security
Question
You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called What should you do? proj-vm.
Options
- ADownload the private key from the service account, and add it to each VMs custom metadata.
- BDownload the private key from the service account, and add the private key to each VM's SSH
- CGrant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
- DWhen creating the VMs, set the service account's API scope for Compute Engine to read/write.
How the community answered
(21 responses)- A14% (3)
- B5% (1)
- C81% (17)
Explanation
You create the service account in proj-sa and take note of the service account email, then you go to proj-vm in IAM > ADD and add the service account's email as new member and give it the Compute Storage Admin role.
Topics
#service accounts#cross-project IAM#Compute Engine snapshots#role binding
Community Discussion
No community discussion yet for this question.