An organization wants to grant a central network administration team permissions to create and manage Virtual Private Cloud (VPC) networks across all Google Cloud projects within a specific department folder. Which IAM role assignment strategy follows Google Cloud best practices for resource hierarchy and least privilege?
- Grant the predefined Compute Network Admin role to the network administration group at the department folder level.Cevap
- BGrant the primitive Editor role to the network administration group at the department folder level.
- CGrant the Service Account Admin role to each individual member of the network administration group on every project.
- DGrant the Compute Network Admin role to each user account individually on every project within the department folder.
Cevap
Grant the predefined Compute Network Admin role to the network administration group at the department folder level.
Granting the predefined Compute Network Admin role at the folder level leverages resource hierarchy policy inheritance, automatically granting necessary network management permissions across all child projects while adhering strictly to the principle of least privilege.
Adım Adım Çözüm
Anahtar Kavram
Resource Hierarchy IAM Role Inheritance and Least Privilege
Tahmini Süre:1m 0s