Courseiva
mediumMultiple Choice

Google ACE Practice Question: A new developer tries to create a project using…

Exhibit

Refer to the exhibit.

ERROR: (gcloud.projects.create) User [user@example.com] does not have permission to create projects (or the project already exists). To create a project, you must have the resourcemanager.projects.create permission on the resource.

A new developer tries to create a project using gcloud projects create but receives the error shown in the exhibit. Which action should the administrator take to resolve the issue?

⚠ Common exam trap

The trap is assuming that enabling an API or granting a billing role resolves a permission error — candidates must distinguish between API enablement, billing roles, and the specific IAM permission (resourcemanager.projects.create) required for the failing operation.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Assign the Project Creator role (roles/resourcemanager.projectCreator) to the user.

The error occurs because the developer lacks the IAM permission to create projects. The Project Creator role (roles/resourcemanager.projectCreator) grants the resourcemanager.projects.create permission at the organization or folder level, which is exactly what is needed to run 'gcloud projects create'. Assigning this role to the user resolves the permission denied error.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Assign the Project Creator role (roles/resourcemanager.projectCreator) to the user.

    Why this is correct

    The roles/resourcemanager.projectCreator role grants permission to create projects within a specified parent resource such as an organisation, folder, or billing account. Without it, gcloud projects create fails with a permission denied error, so assigning this role resolves the issue.

  • ✗

    Enable the Cloud Resource Manager API.

    Why it's wrong here

    The Cloud Resource Manager API governs project metadata operations, not the IAM permission required to create projects; enabling it leaves the developer's missing role unresolved. It tempts because API-disabled errors are common in GCP, and enabling this API is the fix when resource hierarchy calls fail.

  • ✗

    Assign the Billing Account Creator role to the user.

    Why it's wrong here

    Billing Account Creator grants permission to create new billing accounts, not to create projects within an existing organisation; the developer's project-creation permission remains absent. It tempts because billing linkage errors often accompany project creation, so billing roles appear relevant to the failure.

  • ✗

    Create the project manually and share the project ID.

    Why it's wrong here

    Manual creation and sharing the project ID bypasses the developer's own permissions rather than granting them, leaving the underlying IAM denial unresolved for future attempts. It tempts as a workaround when administrators hold rights the developer lacks, but it does not fix the access error.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 775 original ACE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official Google Cloud exam blueprint

This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.