Google Associate Cloud Engineer Question 11
Single answerGoogle Cloud PlatformAs a Google Cloud Associate Cloud Engineer, you need to provide a new team member with permissions to view all resources within a specific project, but without allowing them to make any changes. Which IAM role should you assign to this member?
- A
Project Owner
- B
Project Editor
- C
Project Viewer
- D
Custom Role with Read Permissions
Show answer and explanation
Correct answer: C
Explanation
The Project Viewer role is specifically designed to provide read-only access to all resources within a project, making it the ideal choice when you want to grant permissions to view resources without allowing any modifications. This role is one of the predefined roles in Google Cloud IAM, simplifying the process of assigning appropriate permissions while adhering to the principle of least privilege.
- A. Incorrect.
Project Owner grants full control over the project, including the ability to manage roles and permissions, which exceeds the requirement to just view resources.
- B. Incorrect.
Project Editor allows making changes to the project resources, which is not suitable since the requirement is to only view resources.
- C. Correct.
Project Viewer provides read-only access to all resources within the project, which aligns with the requirement to allow viewing without making changes.
- D. Incorrect.
Creating a Custom Role with Read Permissions could achieve the desired outcome, but it is unnecessary when a predefined role like Project Viewer already meets the requirement.