Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud…

The correct answer is B. Org viewer, project viewer. A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because: - Org viewer grants the security team permissions to view the organization's display name. - Project viewer grants the security…

Submitted by thandi_sa· Mar 30, 2026Designing for security and compliance

Question

Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin. What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team'?

Options

AOrg viewer, project owner
BOrg viewer, project viewer
COrg admin, project browser
DProject owner, network admin

How the community answered

(44 responses)

A
2% (1)
B
89% (39)
C
2% (1)
D
7% (3)

Explanation

A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because: - Org viewer grants the security team permissions to view the organization's display name. - Project viewer grants the security team permissions to see the resources within projects. C is not correct because Org admin is too broad. The security team does not need to be able to make changes to the organization. D is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. https://cloud.google.com/resource-manager/docs/access-control-org#using_predefined_roles

Topics

#Cloud IAM#org viewer#project viewer#resource hierarchy

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice