Answer-first summary for fast verification
Answer: Establish a new Google Group, include all team members in this group, and then assign the Project Viewer role to the group's email address using the `gcloud projects add-iam-policy-binding` command.
The correct answer is **C** because Google recommends using groups for permission assignments to streamline management and adhere to best practices. This approach simplifies permission management as team changes (additions or removals) only require updates to the group membership, not the IAM policies. - **Option A** is incorrect because assigning permissions individually to users is less efficient and harder to manage than using groups. - **Option B** and **D** are incorrect because the `gcloud iam roles create` command is used for creating custom roles, not for assigning existing roles to users or groups.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
In a small company where all team members need view access to every resource within a specific project, what is the Google-recommended method to grant these permissions?
A
Develop a script that individually assigns the Project Viewer role to each user's email address using the gcloud projects add-iam-policy-binding command.
B
Develop a script that creates a custom role for each user's email address with the Project Viewer permissions using the gcloud iam roles create command.
C
Establish a new Google Group, include all team members in this group, and then assign the Project Viewer role to the group's email address using the gcloud projects add-iam-policy-binding command.
D
Establish a new Google Group, include all team members in this group, and then create a custom role for the group's email address with the Project Viewer permissions using the gcloud iam roles create command.