PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #163
You are setting up a new AlloyDB instance and want users to be able to use their existing Identity and Access Management (IAM) identities to connect to AlloyDB. You have performed the following…
The correct answer is A. Grant the new database users access privileges to the appropriate tables. Although IAM authentication and the alloydb.databaseUser role let users connect, SQL‐level privileges on the actual tables must still be granted inside the database. You need to issue GRANT SELECT (and any other needed privileges) on the relevant schemas/tables to those IAM‐…
Question
Options
- AGrant the new database users access privileges to the appropriate tables.
- BGrant the alloydb.client IAM role to each user.
- CGrant the IAM role to each user.
- DGrant the alloydb.alloydbreplica IAM role to each user.
How the community answered
(38 responses)- A79% (30)
- B5% (2)
- C13% (5)
- D3% (1)
Explanation
Although IAM authentication and the alloydb.databaseUser role let users connect, SQL‐level privileges on the actual tables must still be granted inside the database. You need to issue GRANT SELECT (and any other needed privileges) on the relevant schemas/tables to those IAM‐ mapped database users so they can read the application data.
Topics
Community Discussion
No community discussion yet for this question.