Exam Professional Cloud Database Engineer topic 1 question 11 discussion

A. C is wrong because databaseUser (Person B) would allow database writes and the question says generate metric reports, which would be read access only. databaseReader (Application C) doesn't allow backups. D is wrong because databaseUser (Person B) would allow database writes. That leaves A and B. Based upon Google's own documentation, it must be A. B would work, but backupAdmin for Application C would allow backup deletion as well as creation. backupWriter is described in the docs as "is intended to be used by scripts that automate backup creation". https://cloud.google.com/spanner/docs/iam

We need an Admin for A, A reader for B and a Writer for C. Therefore A is the correct answer.

A is the one. You don't need the backupAdmin.

Answer is A.

It should be A as per the documentation. https://cloud.google.com/spanner/docs/iam#spanner.backupWriter

A is the best answer

A: roles/spanner.databaseAdmin for Person A roles/spanner.databaseReader for Person B roles/spanner.backupWriter for Application C

B and C are obviously wrong because application only needs backupWriter permissions. D is wrong because roles/spanner.databaseUser contains write permissions, and we don't need that.

A is the correct answer. Cloud Spanner Backup Writer This role is intended to be used by scripts that automate backup creation. A principal with this role can create backups, but cannot update or delete them. Lowest-level resource

Correct answer - A