Topic 1 Question 2

Professional Cloud DevOps Engineer

Topic 1 Question 2
You created a Stackdriver chart for CPU utilization in a dashboard within your workspace project. You want to share the chart with your Site Reliability Engineering (SRE) team only. You want to ensure you follow the principle of least privilege. What should you do?
- Share the workspace Project ID with the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
- Share the workspace Project ID with the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
- Click ג€Share chart by URLג€ and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
- Click ג€Share chart by URLג€ and provide the URL to the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
ユーザの投票
コメント(17)
- I think it's C, because dashboard viewer "Read-only access to dashboard configurations." SRE team wants to view data, not configurations.
  
  👍 16
  syslog2021/06/06
- I did a test and see that:
  
  The valid roles are: Monitoring Viewer and Monitoring Dashboard Configuration Viewer. You can only share chart by URL using Metrics explorer.
  
  With only Monitoring Dashboard Configuration Viewer role, user cannot see anything in Monitoring page.
  
  I create a custom role from Monitoring Dashboard Configuration Viewer role and add resourcemanager.projects.get permission.
  
  Now user can see list of custom dashboards and the charts in these custom dashboards. User cannot see standard GCP dashboards.
  
  User cannot see the the chart in Metrics explorer (using the shared URL). Opening the URL, user will see errors: "Invalid resource type" and "Invalid metric type".
  
  So even if I ignore the typo of Dashboard Viewer role in B and D, they are still incorrect answers.
  
  So only A and C are valid. But I think C is better because the question is: "You want to share the chart" not the whole dashboard.
  
  👍 10
  danchoif22021/08/29
- The answer is C...not D, do not confuse the 2 and there is no role called dashboard viewer
  
  👍 2
  TNT872021/12/26
シャッフルモード

ユーザの投票

コメント(17)