An organization is deciding on the layout of their resource hierarchy in Google Cloud. They have several projects within a folder. What will happen when user access policies are applied to the folder?

Question

Accepted Answer

B. The policy will be inherited by the projects and their resources within the folder. Google Cloud IAM uses a hierarchical policy inheritance model where policies flow downward from organization to folders to projects to resources. When a policy is set on a folder, every project inside that folder and every resource inside those projects inherits that policy. This ensures consistent access control without needing to re-apply policies at every level.

Answer

A. The policy will be inherited by the projects in the folder but will not affect their resources. Inheritance in Google Cloud IAM applies to both projects and their underlying resources, not just the projects themselves.

Answer

C. The policy will be applied to all folders within the organization. A policy on a folder applies only within that folder's subtree; it does not propagate to sibling folders or the entire organization.

Answer

D. The policy applies to the folder only, and will not be inherited by any projects. Policies on a folder are explicitly inherited by child projects and resources; they do not stop at the folder boundary.

An organization is deciding on the layout of their resource hierarchy in Google Cloud. They have several projects within a folder. What will happen when user access policies are applied to the folder?

Question

Options

How the community answered

Why each option

Topics

Community Discussion