You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google-recommended practices. Which IAM roles sho

The correct answer is B. Storage Admin. Storage Admin (roles/storage.admin) Grants full control of buckets and objects. When applied to an individual bucket, control applies only to the specified bucket and objects within the bucket. firebase.projects.get resourcemanager.projects.get resourcemanager.projects.list stora

Submitted by skyler.x· Mar 30, 2026Configuring access and security

Question

You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google-recommended practices. Which IAM roles should you grant your colleagues?

Options

AProject Editor
BStorage Admin
CStorage Object Admin
DStorage Object Creator

How the community answered

(30 responses)

B
93% (28)
C
3% (1)
D
3% (1)

Explanation

Storage Admin (roles/storage.admin) Grants full control of buckets and objects. When applied to an individual bucket, control applies only to the specified bucket and objects within the bucket. firebase.projects.get resourcemanager.projects.get resourcemanager.projects.list storage.buckets.* storage.objects.*

Topics

#IAM roles#Cloud Storage#Storage Admin#least privilege

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice