Your organization has hired external auditors to review a Google Cloud project for compliance. The auditors must be able to list and read all resources, view logs, and download data, but they must be strictly blocked from creating, modifying, deleting resources, or changing any billing settings. Which single IAM role assigned at the project level best satisfies these requirements while following the principle of least privilege?
The Viewer basic role (roles/viewer) grants read-only access to all Google Cloud resources within the project, including configurations, metadata, Cloud Storage objects, and logs. It does not allow creating, modifying, or deleting resources, and it cannot manage project billing. Editor and Owner both include broad write permissions, with Owner additionally permitting billing administration. Billing Account Administrator only manages Cloud Billing resources and does not provide visibility into project assets, so it would not allow auditors to inspect resources or data.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the principle of least privilege in IAM roles?
Open an interactive chat with Bash
What actions are allowed under the Viewer IAM role?
Open an interactive chat with Bash
How do IAM roles differ, and why are write permissions excluded for auditors?
Open an interactive chat with Bash
What is the principle of least privilege in IAM roles?
Open an interactive chat with Bash
What specific permissions does the Viewer IAM role provide?
Open an interactive chat with Bash
How is the Viewer IAM role different from Editor and Owner in Google Cloud?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .