Google Cloud Associate Cloud Engineer — Question 240

You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organization. You need to ensure that your Site Reliability Engineers (SREs) have the same project permissions in the startup company's organization as in your own organization. What should you do?

Answer options

• A. In the Google Cloud console for your organization, select Create role from selection, and choose destination as the startup company's organization.
• B. In the Google Cloud console for the startup company, select Create role from selection and choose source as the startup company's Google Cloud organization.
• C. Use the gcloud iam roles copy command, and provide the Organization ID of the startup company's Google Cloud Organization as the destination.
• D. Use the gcloud iam roles copy command, and provide the project IDs of all projects in the startup company's organization as the destination.

Correct answer: C

Explanation

The correct answer is C because using the gcloud iam roles copy command with the Organization ID allows you to replicate the necessary permissions from your organization to the startup's organization effectively. Options A and B involve creating a role, which does not transfer existing permissions, while option D incorrectly suggests using project IDs instead of the organization ID, which is not the appropriate method for this task.