Your company uses Cloud Identity Free edition together with an on-premises Active Directory (AD). Administrators currently create each new employee manually in the Google Cloud console and then add the account to the "gcp-new-hires" group. Leadership wants the process fully automated so that any new users and their group memberships created in AD are reflected in Cloud Identity on an hourly schedule, using only Google-provided tooling that does not add licensing cost. Which solution should you implement?
Install Google Cloud Directory Sync on-premises and configure it to synchronize users and the gcp-new-hires group from Active Directory to Cloud Identity on an hourly schedule.
Create a Cloud Function triggered by Cloud Audit Logs that calls the Admin SDK to create Cloud Identity users whenever an account is added to AD.
Enable Artifact Registry identity federation so that AD users can sign in to Google Cloud and then manually assign the gcp-new-hires group to each user.
Write a weekly cron job that invokes the Cloud Identity Admin SDK to export AD users and import them into Cloud Identity, then adds each account to the gcp-new-hires group.
Google Cloud Directory Sync (GCDS) is a Google-provided tool available at no additional cost. It runs on-premises, connects to LDAP-compatible directories such as Active Directory, and can be scheduled (for example, hourly) to synchronize users, groups, and their memberships into Cloud Identity. Deploying GCDS and configuring it to include the gcp-new-hires group meets the requirement without custom code or extra licensing. The other approaches either require custom scripting, depend on non-existent real-time triggers from AD, or still involve manual steps.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Google Cloud Directory Sync (GCDS)?
Open an interactive chat with Bash
How does GCDS work with Active Directory?
Open an interactive chat with Bash
Why is GCDS better than using custom scripts for synchronization?
Open an interactive chat with Bash
What is Google Cloud Directory Sync (GCDS)?
Open an interactive chat with Bash
How does GCDS facilitate synchronization with Active Directory (AD)?
Open an interactive chat with Bash
Why is GCDS preferred over custom solutions or manual processes?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Setting up a cloud solution environment
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .