Google Associate Cloud Engineer Question 336
Single answerGoogle Cloud PlatformYou have been tasked with assigning specific permissions to a user in your Google Cloud project. The user needs to only have the ability to view and create IAM policies without managing any other resources. Which IAM role should you assign to this user?
- A
Viewer
- B
IAM Policy Administrator
- C
Editor
- D
Security Reviewer
Show answer and explanation
Correct answer: B
Explanation
To fulfill the requirement of allowing a user to view and create IAM policies, the IAM Policy Administrator role is the most appropriate choice. This role provides the necessary permissions to manage IAM policies without granting broader access to other resources, ensuring that the user's access is limited to their specific task.
- A. Incorrect.
The Viewer role grants read-only access to view resources but does not allow the user to create or manage IAM policies.
- B. Correct.
The IAM Policy Administrator role allows the user to view and create IAM policies, which aligns with the requirement to manage IAM roles without broader resource management capabilities.
- C. Incorrect.
The Editor role provides broad permissions to modify resources in the project, which exceeds the specific requirement to only view and create IAM policies.
- D. Incorrect.
The Security Reviewer role allows viewing of security-related data but does not include permissions to create IAM policies.