You have IAM roles defined in a development project and need the same roles in a new production project with minimal steps. What should you do?

The gcloud iam roles copy command is designed for this exact scenario, allowing you to duplicate custom IAM roles from one project to another efficiently. Specifying the production project as the destination ensures the roles are created where needed. Copying to an organization would make the roles available across all projects within that organization, which is not what the question asks for. Using 'create role from role' in the Cloud Console is a valid way to create a new custom role based on an existing one, but it's a manual process for each role, making it less efficient than the gcloud command for multiple roles. Manually selecting all permissions is the most time-consuming and error-prone method.