Your organization has created a new development project that is currently on the free tier. Before the team can start provisioning Compute Engine VMs, the project must be linked to the corporate billing account called "Prod-Billing." You assign the Project Billing Manager role (roles/billing.projectManager) on the project to the lead developer, but when she tries to select Prod-Billing in the Cloud Console, the account is grayed out. What is the most appropriate action to enable her to complete the linkage while following the principle of least privilege?
Move the project into the same folder as other projects that already use Prod-Billing; linkage will occur automatically.
Open a support ticket with Google Cloud to request that the project be forcibly linked to Prod-Billing.
Promote her to Project Owner so she can override the billing account selection for the project.
Grant the lead developer the Billing Account User role on the Prod-Billing account and have her retry the operation.
To change which billing account a project uses, a user needs permissions on both the project and the destination billing account:
On the project: resourcemanager.projects.updateBillingInfo, which is granted by the Project Billing Manager role you already assigned.
On the billing account: billing.accounts.use (and billing.accounts.get), which are granted by the Billing Account User role.
Because she already has the required project-level permission but lacks any role on the Prod-Billing account, the correct and minimally privileged fix is to grant her Billing Account User on that specific billing account. Granting broader roles (e.g., Billing Account Administrator or Project Owner) would give unnecessary additional permissions. Moving the project first or opening a support ticket would not satisfy the permission check enforced by Cloud Billing.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What permissions are required to link a project to a billing account in Google Cloud?
Open an interactive chat with Bash
What is the principle of least privilege and how does it apply here?
Open an interactive chat with Bash
What is the difference between the Billing Account User and Billing Account Administrator roles?
Open an interactive chat with Bash
What does the Billing Account User role (billing.accounts.use) allow?
Open an interactive chat with Bash
Why is the Project Billing Manager role (roles/billing.projectManager) insufficient for linking billing accounts?
Open an interactive chat with Bash
What does 'principle of least privilege' mean in Google Cloud roles?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Setting up a cloud solution environment
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .