An operations specialist needs to manage Compute Engine virtual machine instances within a project and link that project to an enterprise Billing Account. Following Google Cloud best practices and the principle of least privilege, which of the following IAM role assignments are required? (Select TWO.)
- Assign the Compute Admin role (`roles/compute.admin`) to the specialist on the project.Cevap
- Assign the Billing Account User role (`roles/billing.user`) to the specialist on the Billing Account.Cevap
- CAssign the Editor role (`roles/editor`) to the specialist at the project level to handle compute resources and billing configuration.
- DAssign the Billing Account Viewer role (`roles/billing.viewer`) to the specialist on the project level.
Cevap
To perform these tasks using least privilege, assign the Compute Admin role on the project and the Billing Account User role on the Billing Account.
To manage Compute Engine instances while adhering to least privilege, the Compute Admin role provides the necessary compute permissions without exposing unrelated GCP services. To link a project to a Billing Account, the user requires the Billing Account User role granted directly on the Billing Account resource.
Adım Adım Çözüm
Anahtar Kavram
Least privilege IAM role selection for resource management and billing account linking