A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

The correct answer is D. Use the command gcloud projects get-iam-policy to view the current role assignments.. A simple approach would be to use the command flags available when listing all the IAM policy for a given project. For instance, the following command: gcloud projects get-iam-policy $PROJECT_ID --flatten="bindings[].members" -- format="table(bindings.members)" --filter="bindings

Submitted by priya_blr· Mar 30, 2026Configuring access and security

Question

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

Options

AIn the console, validate which SSH keys have been stored as project-wide keys.
BNavigate to Identity-Aware Proxy and check the permissions for these resources.
CEnable Audit Logs on the IAM & admin page for all resources, and validate the results.
DUse the command gcloud projects get-iam-policy to view the current role assignments.

How the community answered

(21 responses)

A
5% (1)
B
5% (1)
D
90% (19)

Explanation

A simple approach would be to use the command flags available when listing all the IAM policy for a given project. For instance, the following command: gcloud projects get-iam-policy $PROJECT_ID --flatten="bindings[].members" -- format="table(bindings.members)" --filter="bindings.role:roles/owner" outputs all the users and service accounts associated with the role ‘roles/owner’ in the project in https://groups.google.com/g/google-cloud-dev/c/Z6sZs7TvygQ?pli=1

Topics

#IAM roles#gcloud CLI#get-iam-policy#security audit

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice