nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #156

You work in a small company where everyone should be able to view all resources of a specific project. You want to grant them access following Google's recommended practices. What should you do?

The correct answer is C. Create a new Google Group and add all users to the group. Use "gcloud projects add-iam-policy-. A is not correct because groups are recommended over individual assignments. B is not correct because this command is to create roles, not to assign them. C is correct because Google recommends to use groups where possible. D is not correct because this command is to create roles

Submitted by fatima_kr· Mar 30, 2026Configuring access and security

Question

You work in a small company where everyone should be able to view all resources of a specific project. You want to grant them access following Google's recommended practices. What should you do?

Options

  • ACreate a script that uses "gcloud projects add-iam-policy-binding" for all users' email addresses
  • BA. Create a script that uses "gcloud iam roles create" for all users' email addresses and the
  • CCreate a new Google Group and add all users to the group. Use "gcloud projects add-iam-policy-
  • DCreate a new Google Group and add all members to the group. Use "gcloud iam roles create"

How the community answered

(20 responses)
  • B
    5% (1)
  • C
    90% (18)
  • D
    5% (1)

Explanation

A is not correct because groups are recommended over individual assignments. B is not correct because this command is to create roles, not to assign them. C is correct because Google recommends to use groups where possible. D is not correct because this command is to create roles, not to assign them. https://cloud.google.com/sdk/gcloud/reference/iam/

Topics

#Google Groups#IAM policy binding#access management#least privilege

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice