Google ChromeOS Administrator — Question 27

Help Desk administrators need a limited set of privileges to perform actions in the Google Admin console. How should an administrator grant these permissions while conforming to the practice of least privilege?

Answer options

• A. Create a Service Desk Group and add Service Desk admins to the group
• B. Create a new custom admin role and assign
• C. Grant service desk administrators the Services Admin Role
• D. Allow Help Desk administrators full access to manage users

Correct answer: B

Explanation

The correct answer is B because creating a custom admin role allows for the precise specification of permissions that align with the least privilege principle. Option A does not address the need for limited privileges specifically, while C grants too many permissions, and D contradicts the least privilege approach by offering full access.