Google Associate Cloud Engineer Question 339
Single answerGoogle Cloud PlatformAs a Google Cloud Associate Cloud Engineer, you need to ensure that a new team member can deploy applications on Google Cloud but not modify existing projects. Which IAM role should you assign to this team member to meet these requirements?
- A
Viewer
- B
Editor
- C
Owner
- D
Cloud Deployment Manager Editor
Show answer and explanation
Correct answer: D
Explanation
The Cloud Deployment Manager Editor role grants the necessary permissions for managing deployments, making it ideal for users who need to deploy applications without the ability to modify existing projects or resources. This aligns with the requirement to allow deployment capabilities while maintaining project integrity.
- A. Incorrect.
The Viewer role allows read-only access to all resources, which would not allow the team member to deploy applications.
- B. Incorrect.
The Editor role provides broad permissions, including modifying resources, which is more than what is required for deploying applications.
- C. Incorrect.
The Owner role includes all permissions of the Editor role plus billing and project ownership capabilities, which exceeds the required permissions for deploying applications.
- D. Correct.
The Cloud Deployment Manager Editor role allows the user to create and manage deployments using the Deployment Manager, making it suitable for deploying applications without altering existing projects.