Explanation:
The correct answer is C because Google recommends using groups for permission assignments to streamline management and adhere to best practices. This approach simplifies permission management as team changes (additions or removals) only require updates to the group membership, not the IAM policies.
gcloud iam roles create command is used for creating custom roles, not for assigning existing roles to users or groups.Ultimate access to all questions.
No comments yet.
In a small company where all team members need view access to every resource within a specific project, what is the Google-recommended method to grant these permissions?
A
Develop a script that individually assigns the Project Viewer role to each user's email address using the gcloud projects add-iam-policy-binding command.
B
Develop a script that creates a custom role for each user's email address with the Project Viewer permissions using the gcloud iam roles create command.
C
Establish a new Google Group, include all team members in this group, and then assign the Project Viewer role to the group's email address using the gcloud projects add-iam-policy-binding command.
D
Establish a new Google Group, include all team members in this group, and then create a custom role for the group's email address with the Project Viewer permissions using the gcloud iam roles create command.