Grant the new game programmatic access to the legacy project's Firestore with least privilege. What should you do?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a service account (SA) in the legacy game's Google Cloud project, add this SA in the new game's IAM page, and then give it the Firebase Admin role in both projects..
Why this is the answer
The correct approach is to create a service account (SA) in the legacy project. This SA represents the new game's programmatic identity. To grant access, this SA then needs to be added to the new game's IAM page as a member, and the Firebase Admin role should be assigned to it in both projects. This ensures the SA has the necessary permissions to access Firestore in the legacy project and is recognized within the new project's context, adhering to the principle of least privilege by granting only the required Firebase-specific role. Incorrect options: Granting Organization Admin role is excessive and violates least privilege. Migrating the new game to the legacy project is a project management decision, not an access control solution, and may not be feasible or desired.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed