PCSE resourcemanager.projects.create permission Practice Question
A company has an organization policy that denies the use of certain GCP services unless the project is in a specific folder. The DevOps team wants to create a new project in that folder. However, the project creation fails. What is the most likely cause?
⚠ Common exam trap
A common trap in the Google PCSE exam is confusing organization policy constraints (which control service usage) with IAM permissions (which control who can create projects). The question tests that project creation fails due to missing IAM permissions at the folder level, not due to organization policy restrictions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The user does not have the resourcemanager.projects.create permission at the folder level.
The most likely cause is that the user lacks the `resourcemanager.projects.create` permission at the folder level. Even if the project is being created in a folder that allows GCP services, the user must have the Project Creator role (or equivalent) granted on that specific folder. Without this permission, the creation request is denied by the Resource Manager, regardless of the folder's capacity or the project name's uniqueness.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The folder has reached its maximum number of projects.
Why it's wrong here
There is no hard limit on projects per folder.
- ✗
The project name is already taken.
Why it's wrong here
Project IDs must be unique, but names can be reused.
- ✗
The organization policy prevents any project creation in the organization.
Why it's wrong here
The policy denies certain services, not project creation.
- ✓
The user does not have the resourcemanager.projects.create permission at the folder level.
Why this is correct
Project creation requires the Project Creator role at the folder or organization level.
Go deeper
Related to this question
About these practice questions
This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.