Exam Professional Cloud Security Engineer topic 1 question 102 discussion

Ans C,D. C. Billing Account Viewer :responsible for matching payments to invoices https://cloud.google.com/billing/docs/how-to/get-invoice#required-permissions Access billing documents:"Billing Account Administrator" or "Billing Account Viewer" D. Billing Account Costs Manager : creating billing alerts https://cloud.google.com/billing/docs/how-to/budgets-notification-recipients "To create or modify a budget for your Cloud Billing account, you need the Billing Account Costs Manager role or the Billing Account Administrator role on the Cloud Billing account." and "If you want the recipients of the alert emails to be able to view the budget, email recipients need permissions on the Cloud Billing account. At a minimum, ensure email recipients are added to the Billing Account Viewer role on the Cloud Billing account that owns the budget. See View a list of budgets for additional information."

Billing Account Costs Administrator to create budgets (aka alerts) Billing Account Viewer to view costs (to be able to match them to invoices)

Billing Account Costs Manager - does not exist! ?!

Answer: CD https://cloud.google.com/billing/docs/how-to/budgets

C,D BA Viewer to see spend info and BA Costs Manager to manage costs, create budgets and alerts BA User and BA Admin have permissions related to linking projects to billing etc. which are not needed. https://cloud.google.com/billing/docs/how-to/billing-access#ba-viewer https://cloud.google.com/billing/docs/how-to/billing-access

Billing Account User: This role has very restricted permissions, so you can grant it broadly. When granted in combination with Project Creator, the two roles allow a user to create new projects linked to the billing account on which the Billing Account User role is granted. Or, when granted in combination with the Project Billing Manager role, the two roles allow a user to link and unlink projects on the billing account on which the Billing Account User role is granted. Billing Account Costs Manager: Create, edit, and delete budgets, view billing account cost information and transactions, and manage the export of billing cost data to BigQuery. Does not confer the right to export pricing data or view custom pricing in the Pricing page. Also, does not allow the linking or unlinking of projects or otherwise managing the properties of the billing account

C. Billing Account Viewer D. Billing Account Costs Manager

CD is the answer. https://cloud.google.com/billing/docs/how-to/billing-access#overview-of-cloud-billing-roles-in-cloud-iam Billing Account Costs Manager (roles/billing.costsManager) - Manage budgets and view and export cost information of billing accounts (but not pricing information) Billing Account Viewer (roles/billing.viewer) - View billing account cost information and transactions.