You are trying to update firewall rules in a shared VPC for which you have been assigned only Network Admin permissions. You cannot modify the firewall rules. Your organization requires using the…

The correct answer is A. Security Admin privileges from the Shared VPC Admin. A Shared VPC Admin can define a Security Admin by granting an IAM member the Security Admin (compute.securityAdmin) role to the host project. Security Admins manage firewall rules and SSL certificates. https://cloud.google.com/vpc/docs/shared-vpc#net_and_security_admins

Submitted by rania.sa· Apr 18, 2026Implementing network security

Question

You are trying to update firewall rules in a shared VPC for which you have been assigned only Network Admin permissions. You cannot modify the firewall rules. Your organization requires using the least privilege necessary. Which level of permissions should you request?

Options

ASecurity Admin privileges from the Shared VPC Admin.
BService Project Admin privileges from the Shared VPC Admin.
CShared VPC Admin privileges from the Organization Admin.
DOrganization Admin privileges from the Organization Admin.

How the community answered

(38 responses)

A
79% (30)
B
11% (4)
C
5% (2)
D
5% (2)

Explanation

A Shared VPC Admin can define a Security Admin by granting an IAM member the Security Admin (compute.securityAdmin) role to the host project. Security Admins manage firewall rules and SSL certificates. https://cloud.google.com/vpc/docs/shared-vpc#net_and_security_admins

Topics

#IAM roles#Shared VPC#Firewall rules#Least privilege

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice