Google PCA Manage implementation of cloud architecture Practice Question

Exhibit

Refer to the exhibit.
```
{
  "bindings": [
    {
      "role": "roles/storage.objectViewer",
      "members": [
        "user:alice@example.com",
        "serviceAccount:sa-bucket@project.iam.gserviceaccount.com"
      ]
    },
    {
      "role": "roles/storage.objectAdmin",
      "members": [
        "group:data-team@example.com"
      ]
    }
  ]
}
```

You are reviewing an IAM policy for a Cloud Storage bucket. Alice is a member of the data-team group. What level of access does Alice have to objects in this bucket?

⚠ Common exam trap

Google Cloud often tests the misconception that group policies override individual policies (a common RBAC misunderstanding), but in Google Cloud IAM, all applicable policies are additive unless a deny rule is explicitly applied.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Read and write access (admin).

The IAM policy grants the data-team group the roles/storage.objectAdmin role, which provides full read, write, and delete access to objects in the bucket. Alice, as a member of the data-team group, inherits this role and therefore has read and write (admin) access to the objects.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Read-only access.
Why it's wrong here
She also has admin via group.
✗
No access, because the group policy overrides the individual policy.
Why it's wrong here
IAM policies are additive, not overriding.
✓
Read and write access (admin).
Why this is correct
Her effective permissions are the union of both roles.
✗
Write-only access.
Why it's wrong here
She has both read and write.

Go deeper

Google PCA Manage implementation of cloud architecture Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question