How should an admin assign this role to Interns?

A large marketing company hires interns in the IT department. The interns should see only info from ChromeOS devices but should not be able to manage or update any device.

How should an admin assign this role to Interns?
A . Create a custom services admin role and enable 2FA
B . Create Custom role under Chrome management and assign Telemetry API role
C . Create Custom role under Chrome management and assign Settings rote
D . Create Custom role under Chrome management and assign Manage ChromeOS devices role K.

View Answer

Answer: B

Explanation:

To grant interns read-only access to ChromeOS device information without management or update capabilities, you should:

Create Custom Role: In the Google Admin console, navigate to "Device management" -> "Chrome management" -> "User settings" -> "Roles."

Assign Telemetry API Role: Within the custom role, assign the "Telemetry API" role. This allows interns to view device information collected through the API but not make changes.

Exclude Other Roles: Ensure no other roles are assigned that grant management or update permissions.

Option A is incorrect because it involves service admin roles, which typically have broader administrative access.

Option C is incorrect because the "Settings" role might grant more permissions than intended.

Option D is incorrect because the "Manage ChromeOS devices" role grants full management

capabilities, which is not suitable for interns.

Reference: Chrome Browser Cloud Management API: https://developers.google.com/chrome/policy