Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM) Roles and Resource Hierarchy

In Google Cloud Platform (GCP), IAM permissions are inherited downward through the resource hierarchy structure. How should an architect sequence the GCP resource hierarchy levels in order of policy inheritance, starting from the highest level (broadest policy scope) down to the lowest level (most narrow policy scope)?

  1. 1Organization node
  2. 2Folder node
  3. 3Project node
  4. 4Individual Resource (e.g., Compute Engine VM or Cloud Storage Bucket)

Answer

The correct sequence of the GCP resource hierarchy from broadest scope to most granular scope is: Organization node, Folder node, Project node, and Individual Resource.
In Google Cloud Platform, IAM policies are inherited transitively from parent to child. The resource hierarchy flows downwards starting from the Organization (root node), through Folders (grouping containers), to Projects (service boundaries), and finally to Individual Resources (leaf elements).

Step-by-Step Solution

1
Identify the root node of the GCP resource hierarchy.
The Organization node is established as position 1.
The Organization node represents the root level, and policies applied here inherit down to all child nodes in the enterprise.
2
Identify the intermediate grouping container node.
The Folder node is established as position 2.
Folders are created directly under the Organization node to group projects and sub-folders for departmental or environment governance.
3
Identify the service and billing boundary container node.
The Project node is established as position 3.
Projects sit inside Folders and act as the core administrative boundary for enabling GCP APIs, services, and billing.
4
Identify the leaf node containing specific GCP service components.
The Individual Resource is established as position 4.
Resources (such as BigQuery datasets or GCS buckets) reside within projects at the lowest level of the resource hierarchy.

Key Concept

GCP IAM Resource Hierarchy Policy Inheritance
Estimated Time:45s
Rate this question

Topics

Identity and Access Management (IAM) Roles and Resource Hierarchy