Google Cloud Associate Cloud Engineer — Question 28

You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google- recommended practices. Which IAM roles should you grant your colleagues?

Answer options

• A. Project Editor
• B. Storage Admin
• C. Storage Object Admin
• D. Storage Object Creator

Correct answer: B

Explanation

The correct answer is B, Storage Admin, as it provides full control over Cloud Storage resources, allowing users to manage buckets and their contents effectively. Option A, Project Editor, offers broader permissions that may exceed the necessary access. Option C, Storage Object Admin, allows management of objects but not the buckets themselves, while Option D, Storage Object Creator, only permits the creation of objects and does not allow for full management.