Members (users, groups, service accounts) in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a 'user' in Google Cloud Platform (GCP)?

A user is an individual person who has a Google account and can access GCP resources with permissions assigned to their account.

beginner

What is a 'group' in GCP IAM?

A group is a collection of users managed together. Assigning permissions to a group applies those permissions to all users in that group.

beginner

What is a 'service account' in GCP?

A service account is a special account used by applications or virtual machines to access GCP resources securely without user intervention.

intermediate

Why use groups instead of assigning permissions to individual users?

Groups simplify management by letting you assign permissions once to many users, making it easier to add or remove users without changing permissions repeatedly.

intermediate

How do service accounts improve security in GCP?

Service accounts allow applications to have their own identity with limited permissions, reducing risk by not using user credentials and enabling fine-grained access control.

Which member type in GCP is best for an application to access resources securely?

A User

B Service Account

C Domain

D Group

Service accounts are designed for applications or virtual machines to access resources securely without using user credentials.

What happens when you assign a role to a group in GCP IAM?

A All users in the group get the role permissions

B Only the group owner gets the role

C The role is assigned to all users in the project

D The role is assigned to service accounts only

Assigning a role to a group grants those permissions to every user who is a member of that group.

Which of these is NOT a valid member type in GCP IAM?

A User

B Service Account

C Virtual Machine

D Group

Virtual machines are resources, not member types. Members are users, groups, service accounts, or domains.

Why should you avoid using user accounts for automated tasks in GCP?

A User accounts cannot access GCP

B User accounts expire quickly

C User accounts have no permissions

D User credentials can be less secure and harder to manage for automation

Using service accounts for automation is safer because user credentials can be compromised and are not designed for automated access.

What is the main benefit of using groups in GCP IAM?

A Groups simplify permission management for multiple users

B Groups are used to store data

C Groups can run virtual machines

D Groups replace service accounts

Groups help manage permissions efficiently by assigning roles to many users at once.

Explain the differences between users, groups, and service accounts in GCP IAM.

Think about who or what needs access and how they are managed.

Describe why service accounts are important for security in GCP.

Consider automated tasks and how they should access resources safely.