You have reviewed all predefined IAM roles but cannot find one that exactly matches the specific set of permissions required by a custom internal application. You decide to create a Custom IAM Role.

Which TWO statements are true regarding Custom IAM Roles? (Select TWO)

Custom IAM roles allow you to combine specific permissions. They can be created at the Project level or the Organization level (but NOT the folder level). A key operational difference is maintenance: Google automatically updates Predefined roles when new features/permissions are added to a service. Custom roles are not updated by Google; the customer is entirely responsible for maintaining them.