You are a project owner and need your co-worker to deploy a new version of your application to App Engine. You want to follow Google's recommended practices. Which IAM roles should you grant your co-w

The correct answer is C. App Engine Deployer. A is not correct because this access is too wide, and Google recommends least-privilege. Also Google recommends predefined roles instead of primitive roles like Project Editor. B is not correct because although it gives write access to module-level and version-level settings, use

Submitted by cyberguy42· Mar 30, 2026Configuring access and security

Question

You are a project owner and need your co-worker to deploy a new version of your application to App Engine. You want to follow Google's recommended practices. Which IAM roles should you grant your co-worker?

Options

AProject Editor
BApp Engine Service Admin
CApp Engine Deployer
DApp Engine Code Viewer

How the community answered

(27 responses)

A
4% (1)
B
4% (1)
C
85% (23)
D
7% (2)

Explanation

A is not correct because this access is too wide, and Google recommends least-privilege. Also Google recommends predefined roles instead of primitive roles like Project Editor. B is not correct because although it gives write access to module-level and version-level settings, users cannot deploy a new version. C is correct because this gives write access only to create a new version. D is not correct because this is read-only access. https://cloud.google.com/iam/docs/understanding-roles

Topics

#App Engine#IAM roles#least privilege#App Engine Deployer

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice