Several departments in an organization are working together on a project. The organization wants to customize access to resources for each department. What is the quickest and most efficient way to achieve this?
A.
By mapping IAM roles to job functions for each department
B.
By assigning IAM primitive roles to each employee
C.
By applying ג€least-privilegeג€ to roles for each employee
D.
By creating a single shared service account for all departments
I would go for A, it says "What is the quickest and most efficient way to achieve this", obviously doing option C (applying least priviledge roles for each employee) would take a long time, the most efficient way is by separating the permissions by Jobs / Departments so this s done by creating Groups then apply their corresponding IAM permissions to each Group (Job / Department).
Keyword is "quickest and most efficient".
Option B and C suggesting to create access for all employees which is not quickest way.
Also, Option D also suggesting to create service account for all departments which is not quickest way.
So, answer will be A. By mapping IAM roles to job functions for each department.
OPTION IS C --> Custom roles are user-defined, and allow you to bundle one or more supported permissions to meet your specific needs. Custom roles are not maintained by Google; when new permissions, features, or services are added to Google Cloud, your custom roles will not be updated automatically.
When you create a custom role, you must choose an organization or project to create it in. You can then grant the custom role on the organization or project, as well as any resources within that organization or project.
I think it is C. Custom roles help you enforce the principle of least privilege, because they help to ensure that the principals in your organization have only the permissions that they need.
https://cloud.google.com/iam/docs/understanding-custom-roles
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
jaxclain
Highly Voted 1 year, 7 months agochai_gpt
Most Recent 5 months, 3 weeks ago__rajan__
6 months agoAnuska1099
10 months agosomeshsehgal
1 year, 4 months agoAkshay0403
1 year, 5 months agoberberar
1 year, 4 months agojellybiscuit
1 year, 6 months agonajmdin
1 year, 6 months agominmin2020
1 year, 6 months agozellck
1 year, 7 months agoTOLETIHARIPRIYASRUJANA
1 year, 7 months agoMurugeshBabu
1 year, 7 months agozellck
1 year, 7 months agoGovindaraj
1 year, 7 months agoSomeshSule
1 year, 7 months agojexmtropicscheatchatya
1 year, 7 months agoPichikik
1 year, 7 months ago