Examkin

Soru

Zorluk: ZorCreating Billing Budgets, Alerts, and BigQuery Exports

A cloud engineer is configuring detailed daily Cloud Billing data exports to BigQuery for an enterprise billing account. The target dataset `billing_export_daily` has already been created in a central project named `corp-finance-analytics`. During configuration within the Cloud Console, the engineer encounters a permission denied error when saving the export settings. What minimum IAM permissions must be granted to the engineer to successfully complete the billing export configuration?

  1. Billing Account Costs Manager (or Billing Account Administrator) on the Cloud Billing account, and BigQuery Data Editor (or BigQuery Admin) on the target project or dataset.Cevap
  2. B
    Billing Account Viewer on the Cloud Billing account, and Project Owner on the target `corp-finance-analytics` project.
  3. C
    Billing Account Costs Manager on the Cloud Billing account, alongside enabling the BigQuery API in each linked service project across the organization.
  4. D
    Billing Account Administrator on the Cloud Billing account, while configuring a budget alert with a Pub/Sub topic to automatically grant BigQuery write access.

Cevap

Granting Billing Account Costs Manager (or Billing Account Administrator) on the Cloud Billing account and BigQuery Data Editor (or BigQuery Admin) on the target project or dataset.
Configuring a BigQuery billing export spans two distinct administrative boundaries. The user setting up the export must hold the Billing Account Costs Manager or Billing Account Administrator role on the Cloud Billing account, and additionally must have dataset edit rights (such as BigQuery Data Editor or BigQuery Admin) on the destination project hosting the BigQuery dataset.

Adım Adım Çözüm

1
Analyze billing account role requirements.
Configuring Cloud Billing exports modifies billing settings, requiring Billing Account Costs Manager or Billing Account Administrator permissions on the billing account.
Read-only roles like Billing Account Viewer cannot authorize export sinks.
2
Analyze BigQuery destination project role requirements.
The configuration persona must have rights to list and write data to the target dataset, requiring BigQuery Data Editor or BigQuery Admin on the destination dataset/project.
Cloud Billing needs to establish dataset connections and schemas in the destination project.
3
Combine dual-boundary IAM role requirements.
The engineer requires explicit role assignments on both the Cloud Billing resource and the target GCP project resource.
Google Cloud separates IAM boundaries between billing accounts and project-level resources.

Anahtar Kavram

Dual IAM Role Requirements for Cloud Billing BigQuery Exports
Bu soruyu puanla

Konular

Creating Billing Budgets, Alerts, and BigQuery Exports

Bu konudan daha fazla soru