What should your team grant to Engineering Group A to meet this requirement?

Your team sets up a Shared VPC Network where project co-vpc-prod is the host project. Your team has configured the firewall rules, subnets, and VPN gateway on the host project. They need to enable Engineering Group A to attach a Compute Engine instance to only the 10.1.1.0/24 subnet.

What should your team grant to Engineering Group A to meet this requirement?
A . Compute Network User Role at the host project level.
B . Compute Network User Role at the subnet level.
C . Compute Shared VPC Admin Role at the host project level.
D . Compute Shared VPC Admin Role at the service project level.

Answer: B

Explanation:

https://cloud.google.com/vpc/docs/shared-vpc#svc_proj_admins

https://cloud.google.com/vpc/docs/shared-vpc#svc_proj_admins