Google
ASSOCIATE-CLOUD-ENGINEER · Question #268
An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this…
The correct answer is A. Create a custom role, and add all the required compute.disks.list and compute.images.list. https://cloud.google.com/iam/docs/custom-roles-permissions-support
Submitted by katya_ua· Mar 30, 2026Configuring access and security
Question
An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this user. What should you do?
Options
- ACreate a custom role, and add all the required compute.disks.list and compute.images.list
- BCreate a custom role based on the Compute Image User role. Add the compute.disks.list to the
- CCreate a custom role based on the Compute Storage Admin role. Exclude unnecessary
- DGrant the Compute Storage Admin role at the project level.
How the community answered
(22 responses)- A73% (16)
- B14% (3)
- C9% (2)
- D5% (1)
Explanation
https://cloud.google.com/iam/docs/custom-roles-permissions-support
Topics
#custom roles#least privilege#compute permissions#IAM
Community Discussion
No community discussion yet for this question.