Question

A data analyst on your team needs read-only access to objects in a single Cloud Storage bucket named 'finance-reports'. Your company follows the principle of least privilege. Other buckets in the same project contain sensitive data the analyst must not access. What is the best way to grant this access?

Accepted Answer

Grant the analyst the roles/storage.objectViewer role on the 'finance-reports' bucket.

Answer

Grant the analyst the roles/storage.objectViewer role at the project level.

Answer

Grant the analyst the roles/viewer basic role at the project level.

Answer

Grant the analyst the roles/storage.admin role on the 'finance-reports' bucket.