An organization following the 'Least Privilege' principle wants to restrict all developers from creating new GCP projects. How should they implement this organizational control?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Use an Organization Policy constraint 'Disable Project Creation'

The Organization Policy Service provides a specific constraint (constraints/resourcemanager.projectCreatorers) that can be set to an empty list to disable self-service project crea...

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioCloud IAM

An organization following the 'Least Privilege' principle wants to restrict all developers from creating new GCP projects. How should they implement this organizational control?

โœ“ Correct Answer & ExplanationCloud IAM

Correct Answer

Use an Organization Policy constraint 'Disable Project Creation'

Why This Answer Is Correct

The Organization Policy Service provides a specific constraint (constraints/resourcemanager.projectCreatorers) that can be set to an empty list to disable self-service project creation.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Cloud IAM โ€” a core concept tested in Professional Cloud Architect. Understanding Cloud IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.