Your organization example-corp.com has thousands of employees managed through Cloud Identity. You must allow every current and future employee to view logs in the shared development project without granting access to anyone outside the company or adding individual users or groups manually. Which IAM principal type should you add to the project with the Logging Viewer role to satisfy this requirement?
A domain principal automatically includes all Google Accounts in the specified Cloud Identity or Google Workspace domain. Granting the Logging Viewer role to the identity formatted as "domain:example-corp.com" immediately covers every existing employee and any new users added later, with no need to maintain group membership lists. A Google Group would still require administrators to add or remove members, allAuthenticatedUsers would expose logs to anyone with any Google Account, and "user:*" is not a valid IAM member identifier.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an IAM principal type in GCP?
Open an interactive chat with Bash
What is the role of 'Logging Viewer' in GCP?
Open an interactive chat with Bash
Why is 'domain:example-corp.com' preferred over other IAM members in this case?
Open an interactive chat with Bash
What is a domain principal in IAM?
Open an interactive chat with Bash
How does a domain principal differ from a Google Group in IAM?
Open an interactive chat with Bash
Why is allAuthenticatedUsers not appropriate in this scenario?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Setting up a cloud solution environment
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .