nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #268

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this…

The correct answer is A. Create a custom role, and add all the required compute.disks.list and compute.images.list. https://cloud.google.com/iam/docs/custom-roles-permissions-support

Submitted by katya_ua· Mar 30, 2026Configuring access and security

Question

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this user. What should you do?

Options

  • ACreate a custom role, and add all the required compute.disks.list and compute.images.list
  • BCreate a custom role based on the Compute Image User role. Add the compute.disks.list to the
  • CCreate a custom role based on the Compute Storage Admin role. Exclude unnecessary
  • DGrant the Compute Storage Admin role at the project level.

How the community answered

(22 responses)
  • A
    73% (16)
  • B
    14% (3)
  • C
    9% (2)
  • D
    5% (1)

Explanation

https://cloud.google.com/iam/docs/custom-roles-permissions-support

Topics

#custom roles#least privilege#compute permissions#IAM

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice