Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM) Roles and Resource Hierarchy

Arrange the levels of the Google Cloud resource hierarchy in sequence from the highest level (broadest IAM policy inheritance scope) to the lowest level (most specific resource scope).

  1. 1Organization Node
  2. 2Folder Node
  3. 3Project Node
  4. 4Resource Node

Answer

The correct hierarchy from top to bottom is Organization Node, followed by Folder Node, Project Node, and finally Resource Node.
In Google Cloud Platform, IAM policies are inherited downwards through the resource hierarchy structure. The hierarchy starts at the Organization level at the top, flows down through Folder levels, then to Project levels, and ultimately applies to individual Resource instances.

Step-by-Step Solution

1
Identify the top root entity of GCP governance.
The Organization node represents the root of the structure where organization-wide policies and roles are inherited down.
All policies attached at the organization level propagate down to all child nodes.
2
Identify intermediate administrative groupings.
Folder nodes reside below the Organization node to organize projects into departments or environments.
Folders provide an intermediate level to apply IAM permissions across collections of projects.
3
Identify the primary resource container.
Project nodes sit inside folders or directly under the organization.
Projects contain individual services and form the main boundary for billing and access policies.
4
Identify the target service instance level.
Resource nodes (e.g., Cloud Storage buckets, VM instances) sit at the base of the hierarchy inside projects.
Resources inherit all permissions granted at ancestor levels (project, folder, organization).

Key Concept

Google Cloud Resource Hierarchy and IAM Inheritance
Estimated Time:45s
Rate this question

Topics

Identity and Access Management (IAM) Roles and Resource Hierarchy