Google Associate Cloud Engineer Question 14
Single answerGoogle Cloud PlatformYour team is developing an application on Google Cloud Platform and you need to grant a colleague the ability to deploy and manage resources within a specific project. Which IAM role should you assign to your colleague to provide the necessary permissions while following the principle of least privilege?
- A
Owner
- B
Editor
- C
Viewer
- D
Project IAM Admin
Show answer and explanation
Correct answer: B
Explanation
The Editor role is appropriate for granting permissions to deploy and manage resources within a project while adhering to the principle of least privilege. It allows users to perform necessary actions on resources without granting them the ability to alter IAM policies or have full control over the project.
- A. Incorrect.
The Owner role grants full control over all resources in the project, including modifying IAM policies, which is more access than necessary for deploying and managing resources.
- B. Correct.
The Editor role provides permissions to create, modify, and delete most resources within the project, which is suitable for deploying and managing resources without giving full control over IAM policies.
- C. Incorrect.
The Viewer role only allows viewing resources without the ability to deploy or manage them, making it insufficient for the task.
- D. Incorrect.
The Project IAM Admin role allows management of IAM policies but does not inherently grant permissions to deploy and manage resources.