Your team needs to prevent users from creating projects in the organization. Only the DevOps team should be allowed to create projects on behalf of the requester. Which two tasks should your team…

Question

Options

• ARemove all users from the Project Creator role at the organizational level.
• BCreate an Organization Policy constraint, and apply it at the organizational level.
• CGrant the Project Editor role at the organizational level to a designated group of users.
• DAdd a designated group of users to the Project Creator role at the organizational level.
• EGrant the billing account creator role to the designated DevOps team.

• A
  76% (19)
• B
  4% (1)
• C
  4% (1)
• E
  16% (4)

Explanation

To restrict project creation to only the DevOps team, two complementary IAM changes are required. First (A), remove all users from the Project Creator role at the organizational level so no one by default can create projects. Second (D), grant the Project Creator role at the organizational level to the designated DevOps group, giving only them that capability. Option B is a plausible distractor - an Organization Policy constraint can restrict certain behaviors, but denying project creation via org policy is not the standard approach; IAM role management is the correct mechanism here. Option C (Project Editor) grants editing rights on existing projects but not the ability to create new ones. Option E (billing account creator) is unrelated to project creation permissions.

No community discussion yet for this question.