Answer-first summary for fast verification
Answer: Set up the engineer with Compute Shared VPC Admin IAM role at the organization level.
The engineer needs the Compute Shared VPC Admin role to manage Shared VPC configurations, including designating host projects and sharing subnets with service projects. Assigning this role at the organization level ensures the permissions apply across all folders and projects, eliminating the need for multiple role assignments at individual folders. The Project IAM Admin role is unnecessary here because the engineer's task does not require modifying IAM policies on projects, only configuring Shared VPC resources. Therefore, option B fulfills the requirement with the fewest steps.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
As the Organization Admin for your company, an engineer under your purview needs to configure multiple host projects across various folders and share subnets with service projects. To enable the engineer's IAM setup with minimal steps, what action should you take?
A
Set up the engineer with Compute Shared VPC Admin IAM role at the folder level.
B
Set up the engineer with Compute Shared VPC Admin IAM role at the organization level.
C
Set up the engineer with Compute Shared VPC Admin IAM role and Project IAM Admin role at the folder level.
D
Set up the engineer with Compute Shared VPC Admin IAM role and Project IAM Admin role at the organization level.
No comments yet.