Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the prod

Question

Options

• AGrant all members of the DevOps team the role of Project Editor on the organization level.
• BGrant all members of the DevOps team the role of Project Editor on the production project.
• CCreate a custom role that combines the required permissions.
• DCreate a custom role that combines the required permissions.

• A
  16% (8)
• B
  4% (2)
• C
  71% (35)
• D
  8% (4)

Explanation

Understanding IAM custom roles Key Point: Custom roles enable you to enforce the principle of least privilege, ensuring that the user and service accounts in your organization have only the permissions essential to performing their intended functions. Custom roles are user-defined, and allow you to bundle one or more supported permissions to meet your specific needs. Custom roles are not maintained by Google; when new permissions, features, or services are added to Google Cloud, your custom roles will not be updated When you create a custom role, you must choose an organization or project to create it in. You can then grant the custom role on the organization or project, as well as any resources within that organization or project. https://cloud.google.com/iam/docs/understanding-custom-roles#basic_concepts

No community discussion yet for this question.