What should you do?

You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices.

What should you do?
A . Add the support team group to the roles/monitoring.viewer role
B . Add the support team group to the roles/spanner.databaseUser role.
C . Add the support team group to the roles/spanner.databaseReader role.
D . Add the support team group to the roles/stackdriver.accounts.viewer role.

View Answer

Answer: A

Explanation:

roles/monitoring.viewer provides read-only access to get and list information about all monitoring data and configurations. This role provides monitoring access and fits our requirements. roles/monitoring.viewer. is the right answer.

Ref: https://cloud.google.com/iam/docs/understanding-roles#cloud-spanner-roles