Google Cloud Digital Leader — Question 209

Several departments in an organization are working together on a project. The organization wants to customize access to resources for each department.
What is the quickest and most efficient way to achieve this?

Answer options

• A. By mapping IAM roles to job functions for each department
• B. By assigning IAM primitive roles to each employee
• C. By applying ג€least-privilegeג€ to roles for each employee
• D. By creating a single shared service account for all departments

Correct answer: A

Explanation

Mapping IAM roles to job functions for each department allows for specific access controls tailored to the needs of each group, making it the most efficient approach. Assigning IAM primitive roles to each employee may not provide the necessary specificity for departmental needs. Applying 'least-privilege' to roles is important but doesn't directly address the customization for departments, and creating a single shared service account could lead to security risks and does not provide individualized access.