ASSOCIATE-CLOUD-ENGINEER · Question #318
ASSOCIATE-CLOUD-ENGINEER Question #318: Real Exam Question with Answer & Explanation
The correct answer is C: Use the gcloud iam roles copy command, and provide the Organization ID of the startup. To apply the same custom project permissions to SREs across two Google Cloud organizations, use the gcloud iam roles copy command to copy the custom role from your organization to the startup company's organization, which ensures consistent permissions.
Question
You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organization. You need to ensure that your Site Reliability Engineers (SREs) have the same project permissions in the startup company's organization as in your own organization. What should you do?
Options
- AIn the Google Cloud console for your organization, select Create role from selection, and choose
- BIn the Google Cloud console for the startup company, select Create role from selection and
- CUse the gcloud iam roles copy command, and provide the Organization ID of the startup
- DUse the gcloud iam roles copy command, and provide the project IDs of all projects in the startup
Explanation
To apply the same custom project permissions to SREs across two Google Cloud organizations, use the gcloud iam roles copy command to copy the custom role from your organization to the startup company's organization, which ensures consistent permissions.
Common mistakes.
- A. The "Create role from selection" option in the Google Cloud console creates a new role within the current organization or project but does not facilitate copying an existing custom role to a different organization.
- B. Similar to option A, using "Create role from selection" in the startup company's console would create a new role there, but it doesn't allow for copying an existing custom role definition from a different organization directly.
- D. While
gcloud iam roles copyis the correct command, providing project IDs would copy project-level custom roles, whereas the requirement is to manage organization-level permissions for SREs to apply across projects, implying an organization-level custom role copy.
Concept tested. Copying custom IAM roles between organizations
Reference. https://cloud.google.com/iam/docs/creating-custom-roles#copy-custom-role
Community Discussion
No community discussion yet for this question.