GCP Associate Cloud Engineer Practice Question

You are asked to link an existing Google Cloud project called finance-prod to your company's centralized billing account. When you attempt this in the Cloud Console, the Link project button is disabled. Your identity currently has the Billing Account Viewer role on the billing account and the Viewer role on the project. Which combination of additional IAM roles will give you the minimum permissions required to complete the link without granting unnecessary broader access?

Assign Editor on the finance-prod project; no additional role is needed on the billing account.
Assign Billing Account User on the billing account and Project Billing Manager on the finance-prod project.
Assign Billing Account Administrator on the billing account and Viewer on the finance-prod project.
Assign Owner on the finance-prod project and Billing Account Viewer on the billing account.

Report Issue

Answer Description

Linking a project to a billing account requires permissions on two separate resources:

Billing account - you need the billing.accounts.get and billing.accounts.update permissions, which are included in the Billing Account User role (roles/billing.user).
Project - you need the resourcemanager.projects.updateBillingInfo permission, provided by the Project Billing Manager role (roles/resourcemanager.projectBillingManager).

Granting Billing Account User on the billing account plus Project Billing Manager on the project satisfies these requirements and follows the principle of least privilege. Billing Account Administrator or Owner roles would also work but grant unnecessary additional permissions. Similarly, granting Editor on the project is broader than needed.

Therefore, selecting Billing Account User for the billing account together with Project Billing Manager for the project is the correct and most restrictive solution.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.