Your security team wants to let the [email protected] Google Group create and manage Compute Engine VM instances in the "blue" project, but the group must not be able to delete the project, change billing, or administer other Google Cloud services. Which IAM configuration best satisfies the requirement while following the principle of least privilege?
Grant the group the roles/editor role on the blue project.
Grant the group the roles/owner role on the blue project.
Grant the group the roles/compute.admin role on the organization node that contains the project.
Grant the group the roles/compute.instanceAdmin.v1 role on the blue project.
Granting the predefined role roles/compute.instanceAdmin.v1 on the project lets members of the [email protected] group create, start, stop, and modify Compute Engine instances and attached disks. The role does not include broad permissions to administer other services, change billing, or delete the project, making it the least-privileged fit. Granting Editor or Owner at any level would give far more permissions than required, while assigning the Compute Admin role at the organization level would exceed the scope and violate least privilege.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the roles/compute.instanceAdmin.v1 role used for in Google Cloud?
Open an interactive chat with Bash
What does the principle of least privilege mean in IAM configuration?
Open an interactive chat with Bash
Why is granting roles/editor or roles/owner not appropriate in this scenario?
Open an interactive chat with Bash
What is the principle of least privilege in Google Cloud IAM?
Open an interactive chat with Bash
What permissions does the roles/compute.instanceAdmin.v1 role include?
Open an interactive chat with Bash
Why is roles/editor or roles/owner considered excessive for this requirement?
Open an interactive chat with Bash
GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .