PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #62
You are a DBA on a Cloud Spanner instance with multiple databases. You need to assign these privileges to all members of the application development team on a specific database: - Can read tables, vie
The correct answer is C. Assign the Cloud Spanner Database User role.. The Cloud Spanner Database User role grants the ability to read data (tables, views, DDL), write rows to tables, and make additive schema changes such as adding columns and indexes. Critically, it does NOT grant the ability to drop the database, which exactly matches the requirem
Question
You are a DBA on a Cloud Spanner instance with multiple databases. You need to assign these privileges to all members of the application development team on a specific database:
- Can read tables, views, and DDL
- Can write rows to the tables
- Can add columns and indexes
- Cannot drop the database
What should you do?
Options
- AAssign the Cloud Spanner Database Reader and Cloud Spanner Backup Writer roles.
- BAssign the Cloud Spanner Database Admin role.
- CAssign the Cloud Spanner Database User role.
- DAssign the Cloud Spanner Admin role.
How the community answered
(50 responses)- A6% (3)
- B2% (1)
- C82% (41)
- D10% (5)
Explanation
The Cloud Spanner Database User role grants the ability to read data (tables, views, DDL), write rows to tables, and make additive schema changes such as adding columns and indexes. Critically, it does NOT grant the ability to drop the database, which exactly matches the requirements. Cloud Spanner Database Admin (B) grants full administrative control including the ability to drop the database - too permissive. Cloud Spanner Database Reader (A, combined with Backup Writer) is read-only and does not allow writes or schema changes. Cloud Spanner Admin (D) is a project-level role granting full control over all Spanner resources, including dropping databases - far too permissive.
Topics
Community Discussion
No community discussion yet for this question.