Examkin

Question

Difficulty: EasyConfiguring Billing Accounts and Linking Projects

A developer attempts to associate a Google Cloud project with an existing corporate Cloud Billing account using the gcloud command line interface, but receives a permission denied error referencing the billing account resource. Following the principle of least privilege, which predefined IAM role must be granted to the developer on the Cloud Billing account to allow project linking?

  1. Billing Account User (roles/billing.user)Answer
  2. B
    Billing Account Administrator (roles/billing.admin)
  3. C
    Project Billing Manager (roles/resourcemanager.projectBillingManager)
  4. D
    Billing Account Viewer (roles/billing.viewer)

Answer

Billing Account User (roles/billing.user)
The Billing Account User role (`roles/billing.user`) provides the precise permission required to associate projects with a Cloud Billing account while preventing unauthorized administrative changes to billing settings.

Step-by-Step Solution

1
Identify the required operation and resource boundary
The user is attempting to link a project to a Cloud Billing account.
Linking requires appropriate IAM permissions on both the target project and the Cloud Billing account resource.
2
Determine the least-privileged role for the Cloud Billing account resource
The `roles/billing.user` role provides `resourcemanager.projects.createBillingAssignment` on the billing account.
This grants the capability to use the billing account to back a project without allowing modification of payments, billing account structure, or administrative policies.

Key Concept

Configuring Billing Accounts and Linking Projects
Estimated Time:45s
Rate this question

Topics

Configuring Billing Accounts and Linking Projects