Exam Associate Cloud Engineer topic 1 question 38 discussion

I think it should be B, setup a group first are suggested way from Google.

B is the correct option

Adding users to a group (Options B and D) is unnecessary unless you specifically want to manage access via a group.

B as per the best practice.

B is correct Because adding a group instead to the user is a GCP best practice

b seems more legit as it will add in the group and they need edit access also

Setup group and add role to it

I go with B but TO have more controlled access, A is correct as well

Google groups can help you manage users at scale. Each member of a Google group inherits the Identity and Access Management (IAM) roles granted to that group. This inheritance means that you can use a group's membership to manage users' roles instead of granting IAM roles to individual users. https://cloud.google.com/iam/docs/groups-in-cloud-console#:~:text=To%20add%20members%3A%20Click%20person,add%20them%20to%20the%20group.

B is the correct option as spanner users are grouped into a single group and can be added to the IAM role. Easy for management work.

Answer C is incorrect because the `roles/spanner.viewer` role only allows read-only access to Spanner instances, whereas the question asks for users to be able to view and edit table data. Answer D is also incorrect for the same reason as answer C. The `roles/spanner.viewer` role does not provide the necessary permissions for editing table data. Therefore, answers A and B are the only options that provide the `roles/spanner.databaseUser` role, which includes the necessary permissions to view and edit table data on a Cloud Spanner instance. However, answer B is arguably better since it involves creating a new group and adding the users to that group, which can simplify the management of permissions in the future.

There's no mention of the 3 users being related, so why create a group? A seems best.

There's no mention of the 3 users being related, so why create a group? A seems best.

I think it's B, because GC best practices suggest to create groups and associate users to it.

Bis the correct answer

B is the most correct based on this https://cloud.google.com/spanner/docs/iam#spanner.databaseUser

Ans is B