thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Foundational

Google Cloud IAM

Google Cloud's identity and access management system that grants roles to principals on resources through allow policies.

Definition

IAM bindings assign roles to principals such as Google accounts, groups, service accounts, domains and workload identity pools. Role types are basic (Owner, Editor, Viewer, too broad for production), predefined (service-specific, least privilege) and custom. IAM Conditions add attribute-based constraints, and deny policies override allows.

Example

Granting roles/storage.objectViewer on a bucket to the data-analysts group lets them read objects only.

Exam tip

Prefer predefined roles granted to groups; basic roles are a common wrong answer because they violate least privilege.

Related terms