Medium1 markMultiple Choice

Domain 5.1: Managing Identity and Access Management (IAM)IAMGoogle GroupsBest PracticesSecurity

GCP ACE · Question 42 · Domain 5.1: Managing Identity and Access Management (IAM)

Your company has a team of 50 data scientists who all need the 'BigQuery Data Viewer' role on a specific project. Team members frequently join and leave the company.

What is the MOST efficient and secure way to manage these IAM assignments?

Answer options:

Assign the role to each data scientist's individual Google account in the IAM console.

Create a Service Account, assign the role to it, and share the Service Account JSON key with the team.

Create a Google Group, add the data scientists to the group, and assign the 'BigQuery Data Viewer' role to the Google Group.

Assign the 'BigQuery Data Viewer' role to the 'allAuthenticatedUsers' special identifier.

How to approach this question

Identify the best practice for managing permissions for multiple users at scale.

Full Answer

C.Create a Google Group, add the data scientists to the group, and assign the 'BigQuery Data Viewer' role to the Google Group.✓ Correct

The best practice for managing IAM roles for multiple users who share the same job function is to use Google Groups. You create a group (e.g., data-scientists@company.com), add the users to the group, and then assign the necessary IAM roles to the group itself. When a new person joins, you simply add them to the group, and they automatically inherit the permissions. This drastically reduces administrative overhead and prevents orphaned permissions when people leave.

Common mistakes

Choosing to assign roles individually, which works but is not 'efficient', or sharing service account keys, which is a major security violation.

Question 41 All questions Question 43

Practice the full GCP Associate Cloud Engineer Practice Exam 6

50 questions · hints · full answers · grading

Your company has a team of 50 data scientists who all need the 'BigQuery Data Viewer' role on a specific project. Team members frequently join and leave the company. What is the MOST efficient and secure way to manage these IAM assignments?

How to approach this question

Full Answer

Common mistakes

Practice the full GCP Associate Cloud Engineer Practice Exam 6

More questions from this exam

Your company has a team of 50 data scientists who all need the 'BigQuery Data Viewer' role on a specific project. Team members frequently join and leave the company.

What is the MOST efficient and secure way to manage these IAM assignments?