Question-20: After that, you will have the ability to tailor specific settings to that organizational unit. An organizational unit is nothing more than a group that an administrator may establish in the Google Admin panel to make it easier to apply settings to a particular group of users. Every user is automatically positioned into the highest-level (parent) organizational unit by default. Within your organization, the environment of Google Cloud is within your purview to manage. It is necessary for several departments to have access to their own projects, and the personnel of each department will be responsible for the same aspects of the project. You want to organize your Google Cloud environment such that it requires as little maintenance as possible while providing as much visibility as possible into the IAM permissions used by each department's projects. You should adhere to the best practices advocated by Google. What action should you take?
A. You should make sure that every member of the department has the appropriate IAM permissions for their individual projects.
B. Establish a Google Group for each division of the company and invite all of the division's employees to join the appropriate group. Establish a separate folder for each department, and then assign the necessary IAM permissions to each department's group at the folder level. Include the projects inside of the appropriate folders.
C. Make a folder for each department, and then grant the necessary IAM permissions to the members of each department at the folder level. Organize all of the projects that are associated with each department into their respective folders.
D. Establish a Google Group for each division of the company and invite all of the division's employees to join the appropriate group. Give each group the IAM permissions that are necessary for the projects that they are working on.
Correct Answer
Get All 340 Questions and Answer for Google Professional Cloud Architect
: 2 Explanation: Make sure that each department has its own Google Group, and include all of the people of that department in that group. Establish a separate folder for each department, and then provide the necessary IAM permissions to each department's group at the folder level. Include the projects inside of the appropriate directories. When managing principals, use groups wherever it's feasible to. https://cloud.google.com/resource-manager/docs/creating-managing-folders It's possible for a folder to hold projects, other folders, or even a mix of the two. In a hierarchy, organisations may employ folders to collect projects together and store them under the organisation node. For instance, your company may have a number of divisions, each of which could have its own own collection of Google Cloud resources. You are able to organise these materials in accordance with the department they belong to using folders.