In Google Cloud IAM: if a policy applied at the project level gives you Owner permissions, your access to an individual resource in that project might be restricted to View permission if someone…

The correct answer is A. False. Policies are a union of those applied to resources themselves and those inherited from higher levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive policy applied to the resource. If a parent policy is more restrictive, it does not…

Identity and Access Management (IAM)

Question

In Google Cloud IAM: if a policy applied at the project level gives you Owner permissions, your access to an individual resource in that project might be restricted to View permission if someone applies a more restrictive policy directly to that resource. What is correct below the option?

Options

AFalse
BNone of the above.
CTrue
DNot defined by GCP.

How the community answered

(37 responses)

A
92% (34)
B
3% (1)
C
5% (2)

Explanation

Policies are a union of those applied to resources themselves and those inherited from higher levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive policy applied to the resource. If a parent policy is more restrictive, it does not override a less restrictive policy applied to the resource. Therefore, access granted at a higher level in the hierarchy cannot be taken away by policies applied at a lower level in the hierarchy.

Topics

#IAM#Permissions Inheritance#Policy Hierarchy#Resource Access

Community Discussion

No community discussion yet for this question.

Full CLOUD-DIGITAL-LEADER Practice