Answer-first summary for fast verification
Answer: Remove all users from the Project Creator role at the organizational level., Add a designated group of users to the Project Creator role at the organizational level.
The question requires preventing all users from creating projects while allowing only the DevOps team to create projects. Option A (Remove all users from the Project Creator role at the organizational level) is necessary because, by default, all users in the domain have the Project Creator role, which must be revoked to prevent unauthorized project creation. Option D (Add a designated group of users to the Project Creator role at the organizational level) ensures that only the DevOps team retains the ability to create projects. Option B is incorrect as there is no Organization Policy constraint that directly restricts project creation; constraints like 'constraints/iam.allowedPolicyMemberDomains' do not address this specific requirement. Option C is unsuitable because granting the Project Editor role does not enable project creation; it only allows editing existing projects. Option E is irrelevant as the Billing Account Creator role pertains to billing accounts, not project creation, and the DevOps team does not need this role to fulfill the requirement.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
Your organization needs to prevent users from creating projects directly. Only the DevOps team should be authorized to create projects on behalf of other users. Which two tasks should you perform to fulfill this requirement? (Choose two.)
A
Remove all users from the Project Creator role at the organizational level.
B
Create an Organization Policy constraint, and apply it at the organizational level.
C
Grant the Project Editor role at the organizational level to a designated group of users.
D
Add a designated group of users to the Project Creator role at the organizational level.
E
Grant the billing account creator role to the designated DevOps team.