Exam Associate Cloud Engineer topic 1 question 215 discussion

D combines the security of a custom role tailored to the company's policy with the ease of management provided by organization-level assignment to a Cloud Identity group.

Best practise is to use predefined roles but in this case we need to apply some restrictions about our company's security policy so I think D is the valid response.

I vote for D

I vote for D

d is the correct answer

Permissions provided at the Organization level are inherited to the folder level and project level.

Use predefined roles: Use predefined roles, such as “Editor” or “Viewer”, instead of creating custom roles. This makes it easier to understand the level of access associated with a role.Use custom roles: Create custom roles when predefined roles do not meet the specific needs of your organization. In the link below: https://cloud.google.com/iam/docs/roles-overview#custom When to use custom roles In most situations, you should be able to use predefined roles instead of custom roles. Predefined roles are maintained by Google, and are updated automatically when new permissions, features, or services are added to Google Cloud. In contrast, custom roles are not maintained by Google; when Google Cloud adds new permissions, features, or services, your custom roles will not be updated automatically.

only D meets best practices

https://www.cloudskillsboost.google/focuses/1035?parent=catalog#:~:text=custom%20role%20at%20the%20organization%20level