Google Associate Cloud Engineer Question 15
Single answerGoogle Cloud PlatformYou are a Google Cloud Engineer and need to grant a new team member access to manage Compute Engine instances in a specific Google Cloud project. Which IAM role should you assign to the member to provide the necessary permissions without granting additional unnecessary permissions?
- A
Viewer
- B
Editor
- C
Compute Admin
- D
Project Owner
Show answer and explanation
Correct answer: C
Explanation
The Compute Admin role is specifically designed to allow users to manage Compute Engine resources, providing the necessary permissions while adhering to the principle of least privilege. This makes it the most appropriate choice for the task, avoiding the risks associated with granting overly broad access.
- A. Incorrect.
The Viewer role only grants read-only access to resources, which does not allow managing Compute Engine instances.
- B. Incorrect.
The Editor role grants broad permissions to modify resources across the project, which may provide more access than necessary for managing just Compute Engine instances.
- C. Correct.
The Compute Admin role grants permissions specifically tailored for managing Compute Engine resources, such as starting and stopping instances, without excessive permissions.
- D. Incorrect.
The Project Owner role grants full control over all resources in the project, which is excessive for managing only Compute Engine instances.