Topic 1 Question 220
You are collaborating on a model prototype with your team. You need to create a Vertex AI Workbench environment for the members of your team and also limit access to other employees in your project. What should you do?
- Create a new service account and grant it the Notebook Viewer role
- Grant the Service Account User role to each team member on the service account
- Grant the Vertex AI User role to each team member
- Provision a Vertex AI Workbench user-managed notebook instance that uses the new service account
- Grant the Vertex AI User role to the default Compute Engine service account
- Grant the Service Account User role to each team member on the default Compute Engine service account
- Provision a Vertex AI Workbench user-managed notebook instance that uses the default Compute Engine service account.
- Create a new service account and grant it the Vertex AI User role
- Grant the Service Account User role to each team member on the service account
- Grant the Notebook Viewer role to each team member.
- Provision a Vertex AI Workbench user-managed notebook instance that uses the new service account
- Grant the Vertex AI User role to the primary team member
- Grant the Notebook Viewer role to the other team members
- Provision a Vertex AI Workbench user-managed notebook instance that uses the primary user’s account
ユーザの投票
コメント(1)
- 正解だと思う選択肢: C
Dedicated Service Account: Creating a separate service account ensures isolation and control over access to Vertex AI resources. Vertex AI User Role: Granting this role to the service account provides it with necessary permissions to interact with Vertex AI services. Service Account User Role: Assigning this role to team members allows them to impersonate the service account, enabling them to use its permissions. Notebook Viewer Role: This role grants team members access to the notebook instance, but not direct Vertex AI resource management. User-Managed Notebook Instance: This type of instance uses a specific service account, ensuring access control is aligned with the designated service account's permissions.
👍 1pikachu0072024/01/12
シャッフルモード