hardMultiple ChoiceObjective-mapped
Google ACE Practice Question: A team runs `gcloud organizations list` and sees…
A team runs `gcloud organizations list` and sees no output even though they know their company has a GCP organization. What is the most likely cause, and how should they resolve it?
⚠ Common exam trap
A common mix-up: candidates assume a missing organization or a command limitation, when in fact the empty output is a deliberate API behavior designed to hide organizations from users without explicit permission, testing the understanding of IAM scoping and the difference between list and describe commands.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The user lacks org-level IAM permissions such as Organization Viewer.
The `gcloud organizations list` command retrieves organizations from the GCP Resource Manager API. If no output is returned despite the organization existing, the most likely cause is that the authenticated user lacks the `resourcemanager.organizations.get` permission, which is granted by roles like Organization Viewer (`roles/resourcemanager.organizationViewer`) or Organization Administrator (`roles/resourcemanager.organizationAdmin`). Without this IAM permission at the organization level, the API call returns an empty list rather than an error, which is a common source of confusion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The organization does not exist yet; run `gcloud organizations create` to create it.
Why it's wrong here
Google Cloud organizations are not created through gcloud; they are automatically provisioned when a Cloud Identity or Google Workspace account is associated with Google Cloud. There is no valid `gcloud organizations create` command. If no organization exists, setup must be performed via the Cloud Identity or Workspace admin console, so this option is not a legitimate fix.
- ✓
The user lacks org-level IAM permissions such as Organization Viewer.
Why this is correct
Correct: `gcloud organizations list` calls the `resourcemanager.organizations.list` API, which returns only organizations where the caller has permission such as `resourcemanager.organizations.get`. The Organization Viewer role includes this permission, and without it the command exits successfully but shows no rows. An organization admin must grant the user an appropriate IAM role at the organization node for the organization to become visible.
- ✗
The gcloud SDK does not support the organizations command; use the Cloud Console instead.
Why it's wrong here
The Cloud SDK fully supports organization commands; `gcloud organizations list` is a valid, documented subcommand. The empty result is due to missing IAM permissions, not missing SDK functionality. Switching to the Cloud Console would also hide the organization if the user lacks `resourcemanager.organizations.get`, so this option is not a correct workaround.
- ✗
The project must be linked to the organization using `gcloud projects move`.
Why it's wrong here
Moving a project with `gcloud projects move` changes its parent folder or organization, but `gcloud organizations list` enumerates only organizations where the caller holds `resourcemanager.organizations.get`. Project membership does not grant that permission, so even a correctly linked project will not appear in the list unless the user has an org-level IAM role.
Visual reference
Go deeper
Related to this question
Learn chapter
Deployment Manager and Terraform on GCP
Key term
IAM
Identity and Access Management (IAM) is a framework of policies and technologies that ensures the right individuals have the appropriate access to technology resources.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
One of 769 original ACE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.