thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Foundational

Google Cloud Resource Hierarchy

Google Cloud's structure of organization, folders, projects and resources used for ownership, policy inheritance and billing.

Definition

The organization node, tied to a Cloud Identity or Google Workspace domain, is the root. Folders group projects by department or environment, projects contain resources, and IAM allow policies and organization policies set at higher levels are inherited by descendants. A less restrictive child policy cannot remove access granted by a parent allow policy.

Example

An Engineering folder contains Prod and Dev folders, each holding several projects with inherited IAM bindings.

Exam tip

IAM permissions are additive down the hierarchy; to restrict, use deny policies or organization policies rather than removing roles at a child.

Related terms