A security team creates a new service account for an external auditor. The auditor needs to inspect every resource and read the data stored in them (for example, download objects from Cloud Storage and view Cloud Logging entries) across an entire project, but must not create, modify, or delete anything. Which single IAM role granted at the project level best meets this requirement while following the principle of least privilege?
Browser (roles/browser)
Viewer (roles/viewer)
IAM Security Reviewer (roles/iam.securityReviewer)
The basic Viewer role (roles/viewer) grants read-only access to all resources and their data within the project, including the ability to download Cloud Storage objects and view Cloud Logging entries. Browser (roles/browser) is more restrictive-it lets a principal list resources and view metadata but not read the data stored inside those resources. Editor and Owner both permit write operations, which violates the read-only requirement. Security Reviewer focuses on IAM and security-related metadata only and does not allow reading application data.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the principle of least privilege in IAM?
Open an interactive chat with Bash
How is the Viewer role different from the Browser in IAM roles?
Open an interactive chat with Bash
Why doesn't the IAM Security Reviewer role fit the auditor's requirement?
Open an interactive chat with Bash
What is the principle of least privilege in IAM roles?
Open an interactive chat with Bash
Can the Browser role access Cloud Storage objects or Cloud Logging entries?
Open an interactive chat with Bash
How does the IAM Security Reviewer role differ from the Viewer role?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .