ASSOCIATE-CLOUD-ENGINEER · Question #250
Which of the following role provide granular access for a specific service and is managed by GCP?
The correct answer is B. Predefined. Predefined roles are GCP-managed roles that grant granular access to specific Google Cloud services, aligning with the principle of least privilege.
Question
Options
- ACustom
- BPredefined
- CAdmin
- DPrimitive
How the community answered
(19 responses)- B95% (18)
- C5% (1)
Why each option
Predefined roles are GCP-managed roles that grant granular access to specific Google Cloud services, aligning with the principle of least privilege.
Custom roles are defined and managed by the user, not by GCP, although they do provide granular access.
Predefined roles are created and maintained by Google Cloud, offering fine-grained permissions for specific services (e.g., Compute Instance Admin, Storage Object Viewer) and are recommended for most use cases.
Admin roles are a category of predefined roles but not a general type that encompasses all granular, GCP-managed roles.
Primitive roles (Owner, Editor, Viewer) are broad roles that apply across all resources in a project, not granular to a specific service.
Concept tested: IAM role types (Predefined vs. Custom vs. Primitive)
Source: https://cloud.google.com/iam/docs/understanding-roles
Topics
Community Discussion
No community discussion yet for this question.