Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all resources in the organization. You use Resource Manager to set…

The correct answer is B. Org viewer, Project viewer. A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because: - Org viewer grants the security team permissions to view the organization's display name. - Project viewer grants the security…

Submitted by hassan_iq· Mar 30, 2026Designing for security and compliance

Question

Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all resources in the organization. You use Resource Manager to set yourself up as the org admin. What Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team?

Options

AOrg viewer, Project owner
BOrg viewer, Project viewer
COrg admin, Project browser
DProject owner, Network admin

How the community answered

(31 responses)

A
3% (1)
B
90% (28)
D
6% (2)

Explanation

A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because: - Org viewer grants the security team permissions to view the organization's display name. - Project viewer grants the security team permissions to see the resources within projects. C is not correct because Org admin is too broad. The security team does not need to be able to make changes to the organization. D is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. https://cloud.google.com/resource-manager/docs/access-control-org#using_predefined_roles

Topics

#IAM roles#organization viewer#project viewer#read-only access

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice