A cloud engineer is tasked with onboarding a new telemetry analytics team into an existing Google Cloud Organization. The engineer must establish an isolated resource hierarchy branch, enable resource consumption, and delegate administrative access following Google Cloud recommended practices. Arrange the following administrative steps in the correct operational sequence from start to finish.
- 1Create a dedicated environment folder under the Organization node using `gcloud resource-manager folders create`.
- 2Provision a new Cloud Project inside the newly created environment folder using `gcloud projects create`.
- 3Link an active Cloud Billing Account to the new project using `gcloud billing projects link`.
- 4Grant required predefined IAM roles to the engineering team on the project using `gcloud projects add-iam-policy-binding`.
Answer
The correct operational sequence is: 1) Create the environment folder under the Organization node, 2) Provision the new Cloud Project inside that folder, 3) Link an active Cloud Billing Account to the project, and 4) Grant predefined IAM roles to the engineering team at the project level.
The workflow follows logical GCP dependency requirements: the parent Folder must be provisioned first within the Organization hierarchy; the Project is then created as a child of that Folder; the Billing Account is attached to the Project to allow compute resource allocation; and finally, IAM role bindings are configured on the initialized Project resource to grant appropriate team access.
Step-by-Step Solution
Key Concept
Resource Hierarchy Construction and Project Lifecycle Management
Estimated Time:1m 30s