Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all resources in the organization. You use Resource Manager to set…

The correct answer is B. Org viewer, Project viewer. A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because: - Org viewer grants the security team permissions to view the organization's display name. - Project viewer grants the security…

Submitted by chen.hong· Apr 18, 2026Configuring access within a cloud solution environment

Question

Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all resources in the organization. You use Resource Manager to set yourself up as the org admin. What Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team?

Options

AOrg viewer, Project owner
BOrg viewer, Project viewer
COrg admin, Project browser
DProject owner, Network admin

How the community answered

(22 responses)

A
14% (3)
B
77% (17)
C
5% (1)
D
5% (1)

Explanation

A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because: - Org viewer grants the security team permissions to view the organization's display name. - Project viewer grants the security team permissions to see the resources within projects. C is not correct because Org admin is too broad. The security team does not need to be able to make changes to the organization. D is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. https://cloud.google.com/resource-manager/docs/access-control-org#using_predefined_roles

Topics

#Cloud IAM#Least Privilege#Resource Hierarchy#Security Visibility

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice