You are a Security Administrator at your organization. You need to restrict service account creation capability within production environments. You want to accomplish this centrally across the…

The correct answer is D. Use organization policy constraints/iam.disableServiceAccountCreation boolean to disable the. You can use the iam.disableServiceAccountCreation boolean constraint to disable the creation of new service accounts. This allows you to centralize management of service accounts while not restricting the other permissions your developers have on projects…

Submitted by kwame.gh· Apr 18, 2026Configuring access within a cloud solution environment

Question

You are a Security Administrator at your organization. You need to restrict service account creation capability within production environments. You want to accomplish this centrally across the organization. What should you do?

Options

AUse Identity and Access Management (IAM) to restrict access of all users and service accounts
BUse organization policy constraints/iam.disableServiceAccountKeyCreation boolean to disable
CUse organization policy constraints/iam.disableServiceAccountKeyUpload boolean to disable the
DUse organization policy constraints/iam.disableServiceAccountCreation boolean to disable the

How the community answered

(61 responses)

A
3% (2)
B
7% (4)
C
2% (1)
D
89% (54)

Explanation

You can use the iam.disableServiceAccountCreation boolean constraint to disable the creation of new service accounts. This allows you to centralize management of service accounts while not restricting the other permissions your developers have on projects. https://cloud.google.com/resource-manager/docs/organization-policy/restricting-service- accounts#disable_service_account_creation

Topics

#Service Accounts#Organization Policy#IAM#Access Control

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice