Google
ASSOCIATE-CLOUD-ENGINEER · Question #92
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution
The correct answer is A. Add the support team group to the roles/monitoring.viewer role. We only need monitoring access. roles/monitoring.viewer Monitoring Viewer Grants read-only access to Monitoring in the Google Cloud console and API. https://cloud.google.com/iam/docs/understanding-roles
Submitted by asante_acc· Mar 30, 2026Configuring access and security
Question
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?
Options
- AAdd the support team group to the roles/monitoring.viewer role
- BAdd the support team group to the roles/spanner.databaseUser role.
- CAdd the support team group to the roles/spanner.databaseReader role.
- DAdd the support team group to the roles/stackdriver.accounts.viewer role.
How the community answered
(37 responses)- A76% (28)
- B14% (5)
- C5% (2)
- D5% (2)
Explanation
We only need monitoring access. roles/monitoring.viewer Monitoring Viewer Grants read-only access to Monitoring in the Google Cloud console and API. https://cloud.google.com/iam/docs/understanding-roles
Topics
#IAM roles#monitoring.viewer#least privilege#Cloud Spanner access
Community Discussion
No community discussion yet for this question.