Exam Associate Cloud Engineer topic 1 question 104 discussion

Correct Answer is (C): We need to apply the GCP Best practices. roles/browser Browser Read access to browse the hierarchy for a project, including the folder, organization, and IAM policy. This role doesn't include permission to view resources in the project. https://cloud.google.com/iam/docs/understanding-roles

C is the better answer.

Directly assigning the roles/browser role to users (answer A) is a simpler and more immediate solution, without the need to manage groups, which reduces administrative complexity.

(roles/browser) Read access to browse the hierarchy for a project, including the folder, organization, and allow policy. This role doesn't include permission to view resources in the project. https://cloud.google.com/resource-manager/docs/access-control-proj#browser To view, only, "view the hierarchical structure", C. But with browser role they will not be able to view resources, only the structure.

https://cloud.google.com/iam/docs/understanding-roles#browser

https://cloud.google.com/iam/docs/understanding-roles

The correct answer is D. Add the users to a group, and add this group to roles/iam.roleViewer role. This approach follows Google-recommended practices by utilizing IAM groups to manage user permissions and ensure granular control over access to the organizational structure. By adding users to a group and assigning the roles/iam.roleViewer role to the group, you can effectively grant the necessary permissions to view the hierarchical structure while minimizing the scope of access.

The answer is D

C is the correct answer. https://cloud.google.com/iam/docs/understanding-roles#browser

C is the correct answer

C. Add the users to a group, and add this group to roles/browser.

C is the answer, Browser - Read access to browse the hierarchy for a project, including the folder, organization, and allow policy

C is correct

C is the correct answer, ID roles/browser Role launch stage General Availability Description Access to browse GCP resources. 6 assigned permissions resourcemanager.folders.get resourcemanager.folders.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list

https://cloud.google.com/iam/docs/understanding-roles

C is the better answer

C is correct