A company has an Organization resource in Google Cloud. Management wants each department to see and manage only its own projects, while the central IT team keeps overall control. Which approach to using the Google Cloud resource hierarchy best supports this goal and minimizes ongoing IAM administration effort?
Create a dedicated folder for each department and grant the department's IAM roles on that folder.
Place every project directly under the Organization node and grant IAM roles individually on each project.
Keep all projects in one folder but distinguish departments by adding labels and using them for IAM control.
Give each department its own Cloud Billing account instead of using folders in the hierarchy.
Creating a separate folder for every department lets you attach IAM policies once at the folder level. Those permissions are automatically inherited by all current and future projects in that folder, so department staff can work only with their own resources. The central IT team can still set broader policies higher in the hierarchy (for example, at the Organization node). Placing all projects directly under the Organization, relying on labels, or creating extra billing accounts does not give the same straightforward, hierarchical inheritance of access controls.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the purpose of the Organization resource in Google Cloud?
Open an interactive chat with Bash
What are IAM roles, and why are they important in Google Cloud?
Open an interactive chat with Bash
How do folders work in the Google Cloud resource hierarchy?
Open an interactive chat with Bash
What is a Google Cloud Organization resource?
Open an interactive chat with Bash
How do IAM policies work for folders in Google Cloud?
Open an interactive chat with Bash
Why are labels not suitable for controlling IAM permissions?
Open an interactive chat with Bash
GCP Cloud Digital Leader
Scaling with Google Cloud Operations
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .