Google Professional Cloud Security Engineer Question 26
Select 4Google Cloud PlatformAn organization wants to programmatically manage user accounts and groups in their Google Cloud environment. They have an application that integrates with Google Cloud Identity and uses the Cloud Identity API to automate these tasks. Which of the following actions can be achieved using the Cloud Identity API?
- A
Create a new user account in the organization.
- B
Assign a custom role to a user within a Google Cloud project.
- C
Add a user to a specific group managed by the organization.
- D
Delete a group from the organization's directory.
- E
Retrieve a list of members in a specific group.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
The Cloud Identity API is designed to manage user accounts and groups in an organization's directory, allowing for tasks such as creating users, managing group memberships, deleting groups, and retrieving group members. However, assigning roles to users within Google Cloud projects falls under the scope of Identity and Access Management (IAM) and cannot be performed using the Cloud Identity API.
- A. Correct.
The Cloud Identity API allows for the creation of new user accounts in the organization's directory.
- B. Incorrect.
Assigning roles to users in specific Google Cloud projects is handled via Identity and Access Management (IAM), not the Cloud Identity API.
- C. Correct.
The Cloud Identity API supports adding users to groups within the organization's directory.
- D. Correct.
The Cloud Identity API supports deleting groups from the organization's directory.
- E. Correct.
The Cloud Identity API can retrieve a list of members in a specific group.