Google Associate Cloud Engineer Question 16
Select 2Google Cloud PlatformAs a Google Cloud Certified Associate Cloud Engineer, you are tasked with managing user access to your organization's resources on Google Cloud Platform. You have been asked to automate the process of adding new users to Cloud Identity and assigning them to specific groups based on department. Which of the following tools or services can you use to achieve this automation?
- A
Google Cloud Directory Sync
- B
Google Cloud Shell
- C
Google Admin SDK
- D
Google Cloud IAM
- E
Google Cloud Console
Show answer and explanation
Correct answers: A, C
Explanation
Automating the management of users and groups in Cloud Identity can be effectively achieved using tools that integrate well with existing systems and offer programmatic control. Google Cloud Directory Sync helps synchronize users and groups from existing directories, while the Google Admin SDK provides API access for programmatically managing these entities directly within Cloud Identity. These tools together allow for comprehensive and automated user and group management.
- A. Correct.
Google Cloud Directory Sync allows you to synchronize user accounts and groups from your existing Active Directory or LDAP server to Cloud Identity, automating the process of managing users and groups.
- B. Incorrect.
Google Cloud Shell is an interactive shell environment for Google Cloud Platform, but it does not inherently provide the capability to automate user management in Cloud Identity without additional scripting.
- C. Correct.
Google Admin SDK provides APIs to manage users, groups, and organizational units in Cloud Identity programmatically, making it a suitable tool for automation.
- D. Incorrect.
Google Cloud IAM is primarily used for managing access to Google Cloud resources but does not directly manage users and groups in Cloud Identity.
- E. Incorrect.
Google Cloud Console is a graphical interface for managing Google Cloud resources, but it does not provide automation capabilities for user and group management without additional scripting or API usage.