Roles (basic, predefined, custom) in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a basic role in Google Cloud Platform (GCP)?

A basic role is a broad set of permissions that apply across all GCP services. Examples include Owner, Editor, and Viewer. They are simple but give wide access.

beginner

How do predefined roles differ from basic roles in GCP?

Predefined roles are more specific than basic roles. They grant permissions tailored to particular services or tasks, helping follow the principle of least privilege.

intermediate

What is a custom role in GCP and why use it?

A custom role is a user-created role with a specific set of permissions chosen to fit unique needs. It helps give only the exact permissions needed, improving security.

beginner

Name the three basic roles in GCP and their main permission levels.

Owner: full control including billing and permissions management. Editor: can modify resources but not manage permissions. Viewer: read-only access to resources.

intermediate

Why is it recommended to avoid using basic roles when possible?

Because basic roles grant broad permissions, they can expose resources to unnecessary risk. Using predefined or custom roles limits access to only what is needed.

Which GCP role type provides the broadest access across all services?

A Custom roles

B Predefined roles

C Basic roles

D No roles

Basic roles like Owner, Editor, and Viewer apply broadly across all services.

What is the main advantage of predefined roles over basic roles?

A They are easier to create

B They cannot be assigned to users

C They grant full access to billing

D They provide more specific permissions

Predefined roles give permissions tailored to specific services or tasks.

Which role type allows you to create a role with exactly the permissions you want?

A Predefined roles

B Custom roles

C Basic roles

D No roles

Custom roles let you pick specific permissions to fit your needs.

Which basic role in GCP can only view resources but not change them?

A Viewer

B Editor

C Custom

D Owner

The Viewer role grants read-only access.

Why should you prefer predefined or custom roles over basic roles?

A They reduce security risks by limiting permissions

B They are easier to assign

C They grant more permissions

D They are free

Limiting permissions reduces risk of accidental or malicious changes.

Explain the differences between basic, predefined, and custom roles in GCP.

Think about how much access each role type gives and how specific they are.

Why is it important to use predefined or custom roles instead of basic roles in a cloud project?

Consider the risks of giving too much access.