A company wants a custom role for a folder-scoped administration task and includes a folder-specific permission. Which statement is correct?

ACreate the custom role at the folder level

BCreate the role at the project level because folder permissions work there

CCreate the custom role at the organization level and grant it on the folder

DUse a basic role and then add the missing permission

Related Questions

Which IAM role type should generally be avoided in production because it is highly permissive and gr...

easy

A team needs an identity for an application running on Compute Engine to call Google Cloud APIs. Whi...

easy

If you grant an allow policy binding on a folder, what happens to child projects and resources under...

easy

A company wants GitHub Actions to access Google Cloud without storing long-lived service account key...

medium

A principal must impersonate a service account to obtain short-lived credentials. Which IAM role is ...

medium

View all Configuring access questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.