Members (users, groups, service accounts) in GCP - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify a user member in a GCP IAM policy binding.

GCP

member = "user:[1]"

Drag options to blanks, or click blank then click option'

[e-mail]

[e-mail]

[e-mail]

[e-mail]

Attempts:

3 left

💡 Hint

Common Mistakes

Using a group or service account email with the 'user:' prefix.

The prefix user: is used to specify an individual user email in IAM policies.

2fill in blank

medium

Complete the code to specify a service account member in a GCP IAM policy binding.

GCP

member = "[1]:[e-mail]"

Drag options to blanks, or click blank then click option'

Auser

BserviceAccount

Cgroup

Ddomain

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'user:' or 'group:' prefix for service accounts.

The prefix serviceAccount: is used to specify a service account in IAM policies.

3fill in blank

hard

Fix the error in the member string to correctly specify a group in a GCP IAM policy.

GCP

member = "[1]:[e-mail]"

Drag options to blanks, or click blank then click option'

Aproject

BserviceAccount

Cuser

Dgroup

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'user:' or 'serviceAccount:' prefix for groups.

The prefix group: is required to specify a Google Group as a member in IAM policies.

4fill in blank

hard

Fill both blanks to create a member string for a domain in GCP IAM policy.

GCP

member = "[1]:[2]"

Drag options to blanks, or click blank then click option'

Adomain

Bexample.com

Cuser

DserviceAccount

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'user:' or 'serviceAccount:' as prefix for domain members.

The prefix domain: is used to specify all users in a domain, followed by the domain name.

5fill in blank

hard

Fill all three blanks to define a service account member with a specific project in GCP IAM policy.

GCP

member = "[1]:[2]@[3].iam.gserviceaccount.com"

Drag options to blanks, or click blank then click option'

AserviceAccount

Bmy-service-account

Cmy-project

Duser

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'user' instead of 'serviceAccount' prefix.

Mixing up service account name and project ID.

The member string for a service account includes the prefix serviceAccount:, the service account name, and the project ID.