Practice Test 1 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
You are working on a project with two compliance requirements. The first requirement states that your developers should be able to see the Google Cloud Platform billing charges for only their own projects. The second requirement states that your finance team members can set budgets and view the current charges for all projects in the organization. The finance team should not be able to view the project contents. You want to set permissions. What should you do?
A. Add the finance team members to the default IAM Owner role. Add the developers to a custom role that allows them to see their own spend only.
B. Add the finance team members to the Billing Administrator role for each of the billing accounts that they need to manage. Add the developers to the Viewer role for the Project.
C. Add the developers and finance managers to the Viewer role for the Project.
D. Add the finance team to the Viewer role for the Project. Add the developers to the Security Reviewer role for each of the billing accounts.
Correct answer B
Feedback
B (Correct Answer) – B is correct because it uses the principle of least privilege for IAM roles; use the Billing Administrator IAM role for that job function.
A, C, and D are not correct because is it a Google best practice to use pre-defined IAM roles when they exist and match your business scenario; see the link below.
Reference
IAM for Billing: https://cloud.google.com/iam/docs/job-functions/billing
Comments are closed, but trackbacks and pingbacks are open.