You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments. What should you do?

The correct answer is B. Assign each user the compute.networkAdmin role. We need a compute.interconnectAttachments.delete permission to delete VLAN attachments. The compute.networkAdmin role has it. https://cloud.google.com/compute/docs/access/iam#compute.networkAdmin

Submitted by anna_se· Apr 18, 2026Implementing network security

Question

You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments. What should you do?

Options

AAssign each user the editor role.
BAssign each user the compute.networkAdmin role.
CGive each user the following permissions only: compute.interconnectAttachments.create,
DGive each user the following permissions only: compute.interconnectAttachments.create,

How the community answered

(40 responses)

A
15% (6)
B
75% (30)
C
8% (3)
D
3% (1)

Explanation

We need a compute.interconnectAttachments.delete permission to delete VLAN attachments. The compute.networkAdmin role has it. https://cloud.google.com/compute/docs/access/iam#compute.networkAdmin

Topics

#IAM#Least Privilege#Cloud Interconnect#Predefined Roles

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice