Examkin

Question

Difficulty: MediumCreating Billing Budgets, Alerts, and BigQuery Exports

A Cloud Engineer is assigned to create a monthly spend budget and threshold alerts for a production workload. The engineer currently holds the Project Owner role on the Google Cloud project where the resources are deployed. When attempting to create a new budget in the Google Cloud Console, the engineer discovers that they cannot view or manage budgets for the associated Cloud Billing account. Which action must be taken to enable the engineer to create and manage billing budgets?

  1. Grant the engineer the Billing Account Costs Manager role on the Cloud Billing account.Answer
  2. B
    Grant the engineer the Project Billing Manager role on the target Google Cloud project.
  3. C
    Configure the automatic resource capping toggle within the Cloud Billing budget threshold settings.
  4. D
    Enable the Cloud Billing API directly within the target Google Cloud project.

Answer

Grant the engineer the Billing Account Costs Manager role on the Cloud Billing account.
To create and manage budgets and budget alerts, a user must have permissions on the Cloud Billing account itself. The Billing Account Costs Manager role provides the necessary permissions (`billing.budgets.create`, `billing.budgets.get`, `billing.budgets.update`) to manage budgets without granting full administrative control over billing payment methods.

Step-by-Step Solution

1
Identify the resource scope required for billing budget creation.
Budgets are created and managed at the Cloud Billing account level, not at the individual project level.
Although a budget can monitor costs for specific projects, budget definitions reside on the Cloud Billing account object.
2
Evaluate the engineer's current permissions.
The engineer holds the Project Owner role on a child project, which does not inherit administrative control over the parent Cloud Billing account.
IAM permissions granted on a project do not grant permissions on the parent Cloud Billing account.
3
Select the minimum necessary IAM role on the Cloud Billing account.
Assigning the Billing Account Costs Manager role provides `billing.budgets.create` and `billing.budgets.get` permissions on the billing account.
This adheres to the principle of least privilege while providing full functionality to manage billing budgets and alerts.

Key Concept

Cloud Billing IAM Roles vs Project IAM Roles for Budget Administration
Rate this question

Topics

Creating Billing Budgets, Alerts, and BigQuery Exports

More questions from this topic