Google Associate Cloud Engineer Question 12
Single answerGoogle Cloud PlatformYou are managing a Google Cloud project and need to grant a new team member access to view resources, but not modify them. Which IAM role should you assign to this new member?
- A
Viewer
- B
Editor
- C
Owner
- D
Security Admin
Show answer and explanation
Correct answer: A
Explanation
To grant a user the ability to view but not modify resources within a Google Cloud project, the 'Viewer' IAM role is appropriate. This role provides read-only access to all resources in the project, ensuring the new member can view resources without the ability to make changes.
- A. Correct.
The 'Viewer' role allows users to view resources but not modify them, which is suitable for your requirement.
- B. Incorrect.
The 'Editor' role allows users to view and modify resources, which is more access than needed for viewing only.
- C. Incorrect.
The 'Owner' role provides full administrative access, including modifying and deleting resources, which is beyond the requirement.
- D. Incorrect.
The 'Security Admin' role focuses on managing security policies and access controls, not general resource viewing.