To grant each network operator least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments, which role or permissions should you grant?
Choose an answer
Tap an option to check your answer.
Correct answer: Assign each user the compute.networkAdmin role..
Why this is the answer
The compute.networkAdmin role grants comprehensive administrative privileges over network resources, including the ability to create, modify, and delete Cloud Interconnect VLAN attachments, which aligns with the requirement for least-privilege access for network operators. The editor role is too broad, granting permissions beyond just network administration. The options providing only compute.interconnectAttachments.create and get permissions are insufficient because they lack permissions for modification and deletion, and also omit necessary permissions for managing associated routers, which are integral to Cloud Interconnect. The option including router permissions is still incomplete as it misses update and delete permissions for interconnect attachments.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed