Google Associate Cloud Engineer Question 17
Single answerGoogle Cloud PlatformA Google Cloud organization wants to streamline the onboarding process for new employees by automatically assigning them to the appropriate groups in Cloud Identity based on their department. As an Associate Cloud Engineer, which approach should you recommend to achieve this?
- A
Use Google Cloud Console to manually add each user to their respective groups.
- B
Implement Google Cloud Directory Sync to automatically sync users and group memberships from the on-premises Active Directory.
- C
Create a Google Cloud Function that triggers on new user creation and assigns the users to groups based on metadata.
- D
Use Google Workspace Admin SDK to automate the process by writing a script that adds users to groups based on their department.
Show answer and explanation
Correct answer: D
Explanation
The Google Workspace Admin SDK offers a powerful way to manage Cloud Identity resources programmatically. By writing a script that utilizes this SDK, organizations can automate group assignments based on user attributes like department, streamlining the onboarding process without manual intervention.
- A. Incorrect.
While manually adding users can be done via the Google Cloud Console, it does not automate the process and is prone to human error.
- B. Incorrect.
Google Cloud Directory Sync is used to synchronize users and groups from Active Directory to Google Cloud, but it requires an existing Active Directory infrastructure.
- C. Incorrect.
While using a Google Cloud Function could automate the process, it is not the most efficient or straightforward solution for this scenario.
- D. Correct.
The Google Workspace Admin SDK provides a programmatic way to manage users and groups, making it suitable for automating the assignment of users to groups based on their attributes such as department.