nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #237

You are responsible for the Google Cloud environment in your company. Multiple departments need access to their own projects, and the members within each department will have the same project…

The correct answer is B. Create a Google Group per department and add all department members to their respective. https://cloud.google.com/resource-manager/docs/access-control-folders#best-practices-folders- Use groups whenever possible to manage principals. https://cloud.google.com/resource-manager/docs/creating-managing-folders A folder can contain projects, other folders, or a…

Submitted by fernanda_arg· Mar 30, 2026Designing for security and compliance

Question

You are responsible for the Google Cloud environment in your company. Multiple departments need access to their own projects, and the members within each department will have the same project responsibilities. You want to structure your Google Cloud environment for minimal maintenance and maximum overview of IAM permissions as each department's projects start and end. You want to follow Google-recommended practices. What should you do?

Options

  • AGrant all department members the required IAM permissions for their respective projects.
  • BCreate a Google Group per department and add all department members to their respective
  • CCreate a folder per department and grant the respective members of the department the required
  • DCreate a Google Group per department and add all department members to their respective

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    87% (26)
  • C
    7% (2)
  • D
    3% (1)

Explanation

https://cloud.google.com/resource-manager/docs/access-control-folders#best-practices-folders- Use groups whenever possible to manage principals. https://cloud.google.com/resource-manager/docs/creating-managing-folders A folder can contain projects, other folders, or a combination of both. Organizations can use folders to group projects under the organization node in a hierarchy. For example, your organization might contain multiple departments, each with its own set of Google Cloud resources. Folders allow you to group these resources on a per-department basis.

Topics

#Google Groups#IAM#organizational hierarchy#access management

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice