Google Professional Cloud Security Engineer Question 27
Select 2Google Cloud PlatformYou are a security engineer at a company using Google Cloud. You are tasked with creating a script to manage user accounts and groups programmatically. The company uses Google Groups for access control to Cloud resources. Which of the following Cloud APIs should you use to programmatically manage group memberships and user accounts?
- A
Cloud Identity API
- B
Admin SDK Directory API
- C
Cloud Resource Manager API
- D
Identity and Access Management (IAM) API
- E
BigQuery API
Show answer and explanation
Correct answers: A, B
Explanation
To manage user accounts and groups programmatically, you need APIs that specifically handle identity and group management. The Cloud Identity API and the Admin SDK Directory API are designed for these purposes, enabling you to manage users, groups, and group memberships effectively. Other APIs listed are unrelated to this task.
- A. Correct.
The Cloud Identity API is used for managing users, groups, and group memberships programmatically in a Google Workspace or Cloud Identity domain. It is a relevant API for this use case.
- B. Correct.
The Admin SDK Directory API is specifically designed to manage users, groups, and organizational units in Google Workspace. It is also relevant for the task described.
- C. Incorrect.
The Cloud Resource Manager API is used for managing projects, folders, and organizations. It is not relevant to managing user accounts or groups.
- D. Incorrect.
The IAM API is used for managing roles and permissions on Google Cloud resources but does not deal with user accounts or group memberships directly.
- E. Incorrect.
The BigQuery API is used for managing BigQuery datasets, tables, and jobs. It is not relevant to user or group management.