Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsetup › Which Google Cloud Identity and Access Managemen…
Which Google Cloud Identity and Access Management (IAM) concept defines a SET of permissions that can be granted to a principal?
AA Project
BA Network endpoint
CA Persistent Disk
DA Role (predefined, basic, or custom)
Answer & Solution
Correct answer: D. A Role (predefined, basic, or custom)
An IAM role bundles permissions (e.g. `compute.instances.start`). You bind a role to a principal (user, group, service account) at a scope to grant access. Projects, network endpoints, and disks are resources — not permission sets.
Related questions
An organization wants every project in a specific folder to automatically inherit a policyWhich approach correctly captures Google Cloud's quota model for compute resources?Which IAM role type lets you define the exact list of permissions you want, instead of relA team wants to grant a contractor read-only access to a single Cloud Storage bucket and nCloud Identity vs Google Workspace — which statement is correct?A new application needs to call the BigQuery and Cloud Storage APIs in a project. The APIsWhich mechanism on Google Cloud lets a central admin enforce a rule like "no externally acWhich Google Cloud principal type is meant to authenticate workloads (e.g. a Compute Engin