GCP Professional Data Engineer Practice Question

Your team manages a private Analytics Hub data exchange in a central project.

Requirements

The Governance group must be able to configure the exchange, change IAM policies, and delete it when required.
The Producer group needs to publish and maintain new listings but must not change exchange-level IAM.
An external partner should only be able to subscribe to a listing and create a linked dataset in their own project.

Which set of IAM roles provides the minimum required privileges for each group?

Governance: analyticshub.admin Producer: analyticshub.subscriber External partner: analyticshub.publisher
Governance: analyticshub.publisher Producer: analyticshub.admin External partner: analyticshub.viewer
Governance: analyticshub.admin Producer: analyticshub.editor External partner: analyticshub.viewer
Governance: analyticshub.admin Producer: analyticshub.publisher External partner: analyticshub.subscriber

Report Issue

Answer Description

The Analytics Hub Admin role (roles/analyticshub.admin) grants full control over an exchange, including IAM management, so it is appropriate for the Governance group. The Analytics Hub Publisher role (roles/analyticshub.publisher) lets a user create, update, and delete listings inside an existing exchange but does not allow IAM changes-matching the Producer group's needs. The Analytics Hub Subscriber role (roles/analyticshub.subscriber) is the least-privilege role that permits subscribing to a listing and creating a linked dataset, satisfying the external partner's requirement. Other options are incorrect because:

There is no analyticshub.editor role, and analyticshub.viewer cannot create subscriptions.
Swapping admin and publisher would give Producers too much power and Governance too little.
Granting publisher to the partner or subscriber to Producers violates least-privilege and does not meet functional needs.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.