Google
PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #135
The security operations team needs access to the security-related logs for all projects in their organization. They have the following requirements: - Follow the least privilege model by having only…
The correct answer is A. roles/logging.privateLogViewer. roles/logging.privateLogViewer (Private Logs Viewer) includes all the permissions contained by roles/logging.viewer, plus the ability to read Data Access audit logs in the _Default bucket. https://cloud.google.com/logging/docs/access-control
Submitted by andres_qro· Apr 18, 2026Configuring access within a cloud solution environment
Question
The security operations team needs access to the security-related logs for all projects in their organization. They have the following requirements: - Follow the least privilege model by having only view access to logs. - Have access to Admin Activity logs. - Have access to Data Access logs. - Have access to Access Transparency logs. Which Identity and Access Management (IAM) role should the security operations team be granted?
Options
- Aroles/logging.privateLogViewer
- Broles/logging.admin
- Croles/viewer
- Droles/logging.viewer
How the community answered
(45 responses)- A78% (35)
- B11% (5)
- C2% (1)
- D9% (4)
Explanation
roles/logging.privateLogViewer (Private Logs Viewer) includes all the permissions contained by roles/logging.viewer, plus the ability to read Data Access audit logs in the _Default bucket. https://cloud.google.com/logging/docs/access-control
Topics
#IAM Roles#Cloud Logging#Least Privilege#Security Operations
Community Discussion
No community discussion yet for this question.