ExpertMinds LogoExpertMinds
Medium1 markMultiple Choice
Domain 5.1: Managing Identity and Access Management (IAM)Domain 5.1IAMGoogle GroupsBest Practices

GCP ACE · Question 44 · Domain 5.1: Managing Identity and Access Management (IAM)

You have a team of 10 developers who all need the 'roles/run.developer' role to deploy applications to Cloud Run. You want to manage their access efficiently so that when a developer leaves the team, their access can be easily revoked without modifying the project's IAM policy directly.

Which TWO steps should you take? (Select TWO)

Answer options:

A.

Create a Google Group and add the 10 developers as members.

B.

Grant the 'roles/run.developer' role to each developer individually.

C.

Grant the 'roles/run.developer' role to the Google Group at the project level.

D.

Create a Service Account for each developer and grant the role to the Service Accounts.

E.

Assign the developers to a custom VPC network.

How to approach this question

Identify the best practice for managing IAM permissions for teams of users.

Full Answer

Create a Google Group and add the 10 developers as members., Grant the 'roles/run.developer' role to the Google Group at the project level.
The best practice for managing IAM for multiple users is to use Google Groups. You create a group, add the users to it, and then bind the IAM role to the group. If a user leaves, you simply remove them from the Google Group; the project's IAM policy remains unchanged.

Common mistakes

Assigning roles to users individually, which creates administrative overhead.
43All questions45

Practice the full GCP Associate Cloud Engineer Practice Exam 3

50 questions · hints · full answers · grading

Sign up freeTake the exam

More questions from this exam

Q01You are starting a new project in Google Cloud and need to create a new GCP project and enable th...EasyQ02A new team member has joined your operations team. They need to be able to view all Compute Engin...MediumQ03Your company is migrating to Google Cloud. You currently manage all employee identities in an on-...MediumQ04Your development team is experimenting with new GCP services in a sandbox project. The finance te...MediumQ05Your company wants to perform complex, custom SQL analysis on their Google Cloud billing data to ...Easy
View all 50 questions →