What should your team grant to Engineering Group A to meet this requirement?

Your team sets up a Shared VPC Network where project co-vpc-prod is the host project.

Your team has configured the firewall rules, subnets, and VPN gateway on the host project. They need to enable Engineering Group A to attach a Compute Engine instance to only the 10.1.1.0/24 subnet.

What should your team grant to Engineering Group A to meet this requirement?
A . Compute Network User Role at the host project level.
B. Compute Network User Role at the subnet level.
C. Compute Shared VPC Admin Role at the host project level.
D. Compute Shared VPC Admin Role at the service project level.

Answer: B

Explanation:

https://cloud.google.com/vpc/docs/shared-vpc#svc_proj_admins