What should you do?

You are the organization and billing administrator for your company. The engineering team has the Project Creator role on the organization. You do not want the engineering team to be able to link projects to the billing account. Only the finance team should be able to link a project to a billing account, but they should not be able to make any other changes to projects.

What should you do?
A . Assign the finance team only the Billing Account User role on the billing account.
B . Assign the engineering team only the Billing Account User role on the billing account.
C . Assign the finance team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.
D . Assign the engineering team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.

View Answer

Answer: C

Explanation:

From this source: https://cloud.google.com/billing/docs/how-to/custom-roles#permission_association_and_inheritance

"For example, associating a project with a billing account requires the billing.resourceAssociations.create permission on the billing account and also the resourcemanager.projects.createBillingAssignment permission on the project. This is because project permissions are required for actions where project owners control access, while billing account permissions are required for actions where billing account administrators control access. When both should be involved, both permissions are necessary."