Exam Professional Cloud Architect topic 1 question 144 discussion

it's B

B. Create a Google Group per department and add all department members to their respective groups. Create a folder per department and grant the respective group the required IAM permissions at the folder level. Add the projects under the respective folders.

B. Create a Google Group per department and add all department members to their respective groups. Create a folder per department and grant the respective group the required IAM permissions at the folder level. Add the projects under the respective folders.

it's B

B is ok

B is the answer. https://cloud.google.com/resource-manager/docs/access-control-folders#best-practices-folders-iam Use groups whenever possible to manage principals. https://cloud.google.com/resource-manager/docs/creating-managing-folders A folder can contain projects, other folders, or a combination of both. Organizations can use folders to group projects under the organization node in a hierarchy. For example, your organization might contain multiple departments, each with its own set of Google Cloud resources. Folders allow you to group these resources on a per-department basis.

B is most appropriate for the use case and principle of least privilege.

B is most appropriate for the use case and principle of least privilege.

B is correct

B is ok

B is ideal for minimal maintenance and maximum overview of IAM permissions as each department's projects start and end. Manage the users inside Groups will turn it easer.

Voted B

B is the correct answer

Vote B

I would select B.

B is correct, folder restructure per department and IAM permission for Group is recommended.

Answer is B