Explanation:
The principle of least privilege means granting only the permissions necessary to perform a task. For developers needing to commit code to a specific repository, granting the Source Repository Writer role at the repo level is the correct approach. This allows them to list, clone, fetch, and update repositories in the dev project without unnecessary access to other repositories or admin privileges.
Ultimate access to all questions.
No comments yet.
Your company has deployed all its Cloud Source Repositories in a separate GCP Project. You need to grant developers in the dev Project access to commit code to the dev repository in that Project, following Google’s best practice of least privilege. How would you do this?
A
Grant the developers the Source Repository Reader role at project level
B
Grant the developers the Source Repository Writer role at repo level
C
Grant the developers the Source Repository Admin role at project level
D
Grant the developers the Source Repository Admin role at repo level