Google Cloud Professional Cloud Security Engineer Practice Exam

Which identity management solution is best for managing permissions across various business units?

1. Centralized IAM model

2. Decentralized IAM model

3. Single service account model

4. Multi-project IAM model

The correct answer is: Decentralized IAM model

The decentralized IAM model is particularly well-suited for managing permissions across various business units because it allows distinct control and flexibility tailored to the specific needs of each unit. This model empowers individual business units to manage their own user identities and access permissions, which can enhance security and streamline operations. By giving each unit the authority to tailor its IAM policies, organizations can better respond to unique requirements, ensuring that access controls align more closely with local business processes and compliance needs. This approach contrasts with a centralized IAM model, where a single authority manages permissions for all units. While this can provide coherence and overarching policy enforcement, it may stifle the agility each unit requires to respond to specific demands. Similarly, while a single service account model can simplify access for a specific application, it lacks the granularity and control needed for diverse business units. The multi-project IAM model, while beneficial for managing access across multiple projects, also does not allow the same level of autonomy to individual business units as the decentralized IAM model. Thus, the decentralized approach stands out for its ability to balance security and operational efficiency across varying business needs.