Your organization needs to allow a DevOps engineer to create and delete any resource in an existing project, including Compute Engine VMs and Pub/Sub topics, but the engineer must not be able to change IAM policies or modify the project's billing account. Which single IAM role should you grant?
Grant the predefined Compute Admin role (roles/compute.admin) at the project level.
Grant the basic Owner role (roles/owner) at the project level.
Grant the predefined Compute Instance Admin role (roles/compute.instanceAdmin.v1) at the project level.
Grant the basic Editor role (roles/editor) at the project level.
The basic Editor role (roles/editor) grants broad create, update, and delete permissions on most Google Cloud resources within a project. However, unlike the Owner role, it does not include permissions to administer IAM policies or manage billing accounts, making it the best fit for someone who must manage resources but have no authority over access control or billing. Compute-specific predefined roles (roles/compute.admin, roles/compute.instanceAdmin.v1) are too narrow because they do not cover other services such as Pub/Sub. The Owner role is too permissive because it would allow the engineer to alter IAM bindings and billing settings. The Viewer role is read-only and would not permit resource changes.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does the Editor role in GCP allow?
Open an interactive chat with Bash
Why is the Owner role not suitable for this scenario?
Open an interactive chat with Bash
What is the difference between Compute Admin and Compute Instance Admin roles?
Open an interactive chat with Bash
What is the difference between the Editor and Owner roles in GCP?
Open an interactive chat with Bash
What are IAM policies in Google Cloud?
Open an interactive chat with Bash
Why are Compute-specific roles not suitable for managing Pub/Sub topics?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .