Exam Professional Cloud Database Engineer topic 1 question 90 discussion

Option C is corect spanner.admin God-tier control over everything Full CRUD & DDL for instances, databases, users, policies Manage entire Cloud Spanner environment spanner.databaseAdmin Database master control Full CRUD & DDL for databases, users, policies Create, manage, and secure databases spanner.databaseUser Power user with data rights Full CRUD & DDL for specified databases Read, write, modify data, manage database schema spanner.databaseReader Curious but hands-off observer Read-only access and query execution Analyze data without manipulation spanner.viewer Peeping Tom (metaphorically speaking) View instances, databases, and users Monitor Cloud Spanner metadata, no data access spanner.backupAdmin Backup whiz Create, view, update, delete backups Manage backups without accessing data

The answer list is not correct. we need to have a custom role for this task. BTW, Option C (assigning the Cloud Spanner Database User role) does not provide the necessary permissions to add columns and indexes or perform DDL operations. that said, it not correct either :)

C. This has nothing to do with backups. Eliminate A. Any admin role would be too wide. Eliminate B and D. That leaves C. roles/spanner.databaseUser provides r/w. view and update schemas. https://cloud.google.com/spanner/docs/iam#spanner.databaseUser

C A: WRONG. Neither roles can add columns and indexes (missing spanner.databases.updateDdl permission) B: WRONG. Exceeded permissions needed. C: CORRECT. D: WRONG. Exceeded permissions needed. Reference: https://gcp.permissions.cloud/predefinedroles/spanner.admin https://gcp.permissions.cloud/predefinedroles/spanner.databaseReader https://gcp.permissions.cloud/predefinedroles/spanner.backupWriter https://gcp.permissions.cloud/predefinedroles/spanner.databaseAdmin https://gcp.permissions.cloud/predefinedroles/spanner.databaseUser

https://cloud.google.com/spanner/docs/iam

Vote for C

C: Assign the Cloud Spanner Database User *** role.