A finance team asks an IT support analyst to link a standalone project (`app-backend-dev`) to the corporate Cloud Billing account. Applying Google Cloud's principle of least privilege, which TWO predefined IAM roles must be granted to the analyst to complete this task? (Select TWO.)
- Billing Account User (`roles/billing.user`) on the target Cloud Billing accountCevap
- Project Billing Manager (`roles/resourcemanager.projectBillingManager`) on the target Google Cloud projectCevap
- CBilling Account Administrator (`roles/billing.admin`) on the organization node
- DProject Owner (`roles/owner`) on the target Google Cloud project
- EOrganization Viewer (`roles/resourcemanager.organizationViewer`) on the Google Cloud organization
Cevap
To link a Google Cloud project to an existing Cloud Billing account following least privilege, the analyst requires the Billing Account User role on the billing account and the Project Billing Manager role on the project.
Successfully linking a Google Cloud project to a billing account requires explicit IAM authorization on both resources: the Billing Account User role on the billing account and the Project Billing Manager role on the project.
Adım Adım Çözüm
Anahtar Kavram
Linking a project to a Cloud Billing account requires simultaneous least-privilege predefined roles on both the billing account resource (`roles/billing.user`) and the project resource (`roles/resourcemanager.projectBillingManager`).