Google
PROFESSIONAL-DATA-ENGINEER · Question #214
As your organization expands its usage of GCP, many teams have started to create their own projects. Projects are further multiplied to accommodate different stages of deployments and target…
The correct answer is B. Introduce resource hierarchy to leverage access control policy inheritance. C. Create distinct groups for various teams, and specify groups in Cloud IAM policies. Explanation/Reference: Google suggests that we should provide access by following google hierarchy and groups for users with similar roles.
Submitted by thandi_sa· Mar 30, 2026Ensuring solution quality
Question
As your organization expands its usage of GCP, many teams have started to create their own projects. Projects are further multiplied to accommodate different stages of deployments and target audiences. Each project requires unique access control configurations. The central IT team needs to have access to all projects. Furthermore, data from Cloud Storage buckets and BigQuery datasets must be shared for use in other projects in an ad hoc way. You want to simplify access control management by minimizing the number of policies. Which two steps should you take? (Choose two.)
Options
- AUse Cloud Deployment Manager to automate access provision.
- BIntroduce resource hierarchy to leverage access control policy inheritance.
- CCreate distinct groups for various teams, and specify groups in Cloud IAM policies.
- DOnly use service accounts when sharing data for Cloud Storage buckets and BigQuery datasets.
- EFor each Cloud Storage bucket or BigQuery dataset, decide which projects need access.
How the community answered
(44 responses)- A2% (1)
- B77% (34)
- D7% (3)
- E14% (6)
Explanation
Explanation/Reference: Google suggests that we should provide access by following google hierarchy and groups for users with similar roles.
Topics
#Cloud IAM#resource hierarchy#access control policies#IAM groups
Community Discussion
No community discussion yet for this question.