Google Cloud Billing Report: Securing Finance Team Access

Securing Finance Team Access to Google Cloud Billing Report

Question

Your finance team wants to view the billing report for your projects.

You want to make sure that the finance team does not get additional permissions to the project.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

To allow the finance team to view the billing report for your projects without giving them additional permissions to the project, you should add the group for the finance team to roles/billing viewer role.

Here's a detailed explanation for each of the answer options:

A. Add the group for the finance team to roles/billing user role: This option is incorrect as the billing user role allows the user to view and manage the billing account, payment methods, and payment settings. This would give the finance team more permissions than just viewing the billing report.

B. Add the group for the finance team to roles/billing admin role: This option is also incorrect as the billing admin role allows the user to view and manage the billing account, payment methods, payment settings, and budgets. This would give the finance team more permissions than just viewing the billing report.

C. Add the group for the finance team to roles/billing viewer role: This is the correct answer. The billing viewer role allows the user to view the billing account, billing reports, and cost trends. This role does not provide any other permissions outside of viewing the billing information.

D. Add the group for the finance team to roles/billing project/Manager role: This option is incorrect as the billing project/Manager role allows the user to manage the billing for a specific project. This role would provide the finance team with additional permissions to manage the billing for the project, which is not necessary for their requirement to view the billing report.

In summary, to allow the finance team to view the billing report for your projects without giving them additional permissions to the project, you should add the group for the finance team to roles/billing viewer role.