You are reviewing the IAM policies in your organization and realize that a predefined role grants slightly more permissions than your security team allows. You decide to create a Custom IAM role.

Which TWO statements are true regarding Custom IAM roles? (Select TWO)

Custom IAM roles allow you to define a precise set of permissions to meet specific security requirements. However, they come with maintenance overhead. Unlike Predefined roles, which Google automatically updates when new features or services are released, Custom roles are static. You are responsible for maintaining them and adding new permissions if needed. Additionally, Custom roles can only be created at the Project or Organization level; they cannot be created at the Folder level.