Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsetup › Which IAM role type lets you define the exact li…
Which IAM role type lets you define the exact list of permissions you want, instead of relying on Google's predefined bundles?
AService accounts
BCustom roles
CBasic roles (Owner / Editor / Viewer)
DOrganization policies
Answer & Solution
Correct answer: B. Custom roles
Custom roles let you assemble a specific list of permissions (e.g. only `compute.instances.start` + `compute.instances.stop`). Basic roles are very broad (Owner/Editor/Viewer). Service accounts are identities, not roles. Org policies are constraints, not permission bundles.
Related questions
An organization wants every project in a specific folder to automatically inherit a policyWhich approach correctly captures Google Cloud's quota model for compute resources?A team wants to grant a contractor read-only access to a single Cloud Storage bucket and nCloud Identity vs Google Workspace — which statement is correct?A new application needs to call the BigQuery and Cloud Storage APIs in a project. The APIsWhich mechanism on Google Cloud lets a central admin enforce a rule like "no externally acWhich Google Cloud principal type is meant to authenticate workloads (e.g. a Compute EnginWhich Google Cloud Identity and Access Management (IAM) concept defines a SET of permissio