Examkin

Soru

Zorluk: KolayConfiguring Billing Accounts and Linking Projects

A developer attempts to associate a Google Cloud project with an existing corporate Cloud Billing account using the gcloud command line interface, but receives a permission denied error referencing the billing account resource. Following the principle of least privilege, which predefined IAM role must be granted to the developer on the Cloud Billing account to allow project linking?

  1. Billing Account User (roles/billing.user)Cevap
  2. B
    Billing Account Administrator (roles/billing.admin)
  3. C
    Project Billing Manager (roles/resourcemanager.projectBillingManager)
  4. D
    Billing Account Viewer (roles/billing.viewer)

Cevap

Billing Account User (roles/billing.user)
The Billing Account User role (`roles/billing.user`) provides the precise permission required to associate projects with a Cloud Billing account while preventing unauthorized administrative changes to billing settings.

Adım Adım Çözüm

1
Identify the required operation and resource boundary
The user is attempting to link a project to a Cloud Billing account.
Linking requires appropriate IAM permissions on both the target project and the Cloud Billing account resource.
2
Determine the least-privileged role for the Cloud Billing account resource
The `roles/billing.user` role provides `resourcemanager.projects.createBillingAssignment` on the billing account.
This grants the capability to use the billing account to back a project without allowing modification of payments, billing account structure, or administrative policies.

Anahtar Kavram

Configuring Billing Accounts and Linking Projects
Tahmini Süre:45s
Bu soruyu puanla

Konular

Configuring Billing Accounts and Linking Projects