Google Associate Cloud Engineer Question 20
Single answerGoogle Cloud PlatformAs a Google Cloud Associate Cloud Engineer, you are responsible for managing user access to resources in your organization's Google Cloud environment. Your organization uses Cloud Identity to manage users and groups. Recently, you've been tasked to automate the process of adding new employees to the appropriate Cloud Identity groups based on their department. Which of the following tools or services can you use to automate this process efficiently?
- A
Google Cloud Console
- B
Google Cloud SDK with a script
- C
Cloud IAM Policy Simulator
- D
Google Admin SDK Directory API
Show answer and explanation
Correct answer: D
Explanation
The Google Admin SDK Directory API is the appropriate tool for automating the management of users and groups in Cloud Identity. It allows developers to programmatically manage users, groups, and organizational units in a Google Workspace or Cloud Identity domain, which is ideal for automating the addition of new employees to groups based on their department.
- A. Incorrect.
Google Cloud Console is primarily for manual management and does not provide automation capabilities.
- B. Incorrect.
Google Cloud SDK can be used for scripting tasks, but it is not specifically designed for managing Cloud Identity users and groups.
- C. Incorrect.
Cloud IAM Policy Simulator is used for testing IAM policies and does not manage Cloud Identity users and groups.
- D. Correct.
Google Admin SDK Directory API provides programmatic access to manage Cloud Identity users and groups, making it suitable for automation.