nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #149

PROFESSIONAL-CLOUD-DATABASE-ENGINEER Question #149: Real Exam Question with Answer & Explanation

The correct answer is B: roles/spanner.databaseReader. This role grants read-only access to Cloud Spanner databases so analysts can execute queries and read data. It does not permit data modification, schema changes, or instance and database administration, which matches the requirement to run queries without write or administrative

Securing database systems

Question

You are the database specialist at BlueOrbit Logistics and you must grant access for a group of analysts who need to run queries against Cloud Spanner production databases while they must not write data, change schemas, or administer instances. Which IAM role should you assign to meet this requirement?

Options

  • Aroles/spanner.databaseAdmin
  • Broles/spanner.databaseReader
  • Croles/spanner.viewer
  • Droles/spanner.databaseUser

Explanation

This role grants read-only access to Cloud Spanner databases so analysts can execute queries and read data. It does not permit data modification, schema changes, or instance and database administration, which matches the requirement to run queries without write or administrative

Topics

#IAM Roles#Cloud Spanner#Access Control#Database Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DATABASE-ENGINEER PracticeBrowse All PROFESSIONAL-CLOUD-DATABASE-ENGINEER Questions