Share Stackdriver Chart for CPU Utilization with SRE Team
Question
You created a Stackdriver chart for CPU utilization in a dashboard within your workspace project.
You want to share the chart with your Site Reliability Engineering (SRE) team only.
You want to ensure you follow the principle of least privilege.
What should you do?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.A.
The best answer to this question is B. Share the workspace Project ID with the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
Explanation: The question is asking about how to share a Stackdriver chart with a specific team while following the principle of least privilege, which means giving users only the permissions they need to do their job, and no more.
Option A suggests sharing the workspace Project ID with the SRE team and assigning the Monitoring Viewer IAM role in the workspace project. However, the Monitoring Viewer role is a broad role that allows viewing all monitoring data across the entire project. This is more than what the SRE team needs, and it is not the least privilege. Therefore, option A is not the best answer.
Option B suggests sharing the workspace Project ID with the SRE team and assigning the Dashboard Viewer IAM role in the workspace project. The Dashboard Viewer role allows viewing the dashboards and charts created by others. This is what the SRE team needs to view the Stackdriver chart, and it is the least privilege. Therefore, option B is the best answer.
Option C suggests clicking Share chart by URL and providing the URL to the SRE team. Although it is possible to share a Stackdriver chart with a URL, it does not provide any control over who can access the chart. Therefore, this option is not a good solution for the scenario in the question.
Option D suggests sharing the chart by URL and assigning the Dashboard Viewer IAM role in the workspace project. This is similar to option B, but it also includes sharing the chart with a URL. As explained earlier, sharing a URL does not provide control over who can access the chart, so this option is not the best answer.
In summary, the best way to share a Stackdriver chart with a specific team while following the principle of least privilege is to share the workspace Project ID with the team and assign the Dashboard Viewer IAM role in the workspace project.
