Your company's operations team needs to manage virtual machine lifecycle in a production project. They must be able to create, start, stop, and delete Compute Engine instances and their attached disks, but they must not have permissions to change IAM policies or modify networking resources such as VPCs or firewall rules. Following the principle of least privilege, which single predefined IAM role should you grant to the operations group at the project level?
The Compute Instance Admin (v1) role (roles/compute.instanceAdmin.v1) grants permissions to create, start, stop, and delete VM instances and their attached disks. It does not include broad networking permissions or the ability to change IAM policies, satisfying the stated requirements with least privilege. The Editor role and the broader Compute Admin role allow additional actions (including networking changes) that exceed the scope. The Compute Viewer role is read-only and cannot manage instances.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the principle of least privilege in IAM roles?
Open an interactive chat with Bash
What are predefined IAM roles in GCP?
Open an interactive chat with Bash
What distinguishes the Compute Instance Admin role from broader roles like Compute Admin?
Open an interactive chat with Bash
What is the principle of least privilege in IAM roles?
Open an interactive chat with Bash
What is the roles/compute.instanceAdmin.v1 role used for?
Open an interactive chat with Bash
How does roles/compute.instanceAdmin.v1 compare to roles/compute.admin?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .