Google Associate Cloud Engineer Question 344
Select 3Google Cloud PlatformYou are tasked with setting up access controls for a new project on Google Cloud Platform. The project involves several teams, each requiring different levels of access to specific resources. To efficiently manage permissions, you decide to create custom IAM roles. Which of the following steps are necessary when defining a custom IAM role in Google Cloud Platform?
- A
A. Define a descriptive title for the custom role.
- B
B. Specify a unique identifier for the role within the project or organization.
- C
C. Assign the role to users before defining any permissions.
- D
D. Select the permissions needed for the role from a list of predefined permissions.
- E
E. Set an expiration date for the role to automatically revoke it after a certain period.
Show answer and explanation
Correct answers: A, B, D
Explanation
When defining a custom IAM role in Google Cloud Platform, it is essential to specify a descriptive title, a unique identifier, and select the necessary permissions from predefined options. These steps ensure that the role is clearly defined and can be effectively used to manage access controls within the project. Assigning the role to users and setting expiration dates are separate processes that occur after the role is defined.
- A. Correct.
A descriptive title helps in identifying the role's purpose and is necessary when creating a custom IAM role.
- B. Correct.
A unique identifier is required to create a custom IAM role, ensuring it is distinct within the project or organization.
- C. Incorrect.
Assigning the role before defining permissions is incorrect; roles must have defined permissions before assignment.
- D. Correct.
Selecting permissions is crucial as it determines what actions the role can perform on Google Cloud resources.
- E. Incorrect.
Setting an expiration date is not a standard step in defining a custom IAM role; IAM roles do not have expiration dates.