NO.1 You need to grant access for three users so that they can view and edit table data on a Cloud
Spanner instance. What should you do?
A. Run gcloud iam roles describe roles/spanner.viewer – -project my-project. Add the users to a new
group. Add the group to the role.
B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
C. Run gcloud iam roles describe roles/spanner.viewer – -project my-project. Add the users to the
role.
D. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the
group to the role.
1 Answers
You can read about these here https://cloud.google.com/iam/docs/understanding-roles#cloud-spanner-roles
I think the best choice available is D.
First you need to figure out whether you want Viewer or DatabaseUser. Viewer will not suffice since the question specifies that edit table data is a requirement. So you can eliminate A and C. B and D will work but the google best practice to assign users roles is to have them in a group and assign that group a role so D seems to be the correct option.
Also the syntax of the command in A and C does not seem correct. You cannot assign project based iam roles like this. Instead you will use gcloud projects add-iam-policy-binding PROJECT_ID –member=MEMBER –role=ROLE [GCLOUD_WIDE_FLAG …]
Hope this helps. Thanks