Learning IAM roles

I’m struggling a little bit with IAM roles. I’ve taken a few practice exams but always get confused with questions asking which role(s) would be best for certain access on a certain part of GCP.

Are there any good resources anywhere that cover IAM roles in the detail we need to pass the exam or that are more learning friendly? Thanks