Scribd
Upload
72 views1 page

GCP Foundation Notes

Resources inherit policies from their parent resource, such as projects inheriting policies applied at the organization level, and this inheritance is transitive to lower level resources. However, policies implemented at a higher level cannot remove access that is granted by policies at a lower level, so the more permissive policy takes precedence. For example, if a project-level policy grants a user modify access to a storage bucket but an organization-level policy only allows view access, the project-level policy allowing modify access would be in effect.

Uploaded by

Rajat
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
72 views1 page

GCP Foundation Notes

Resources inherit policies from their parent resource, such as projects inheriting policies applied at the organization level, and this inheritance is transitive to lower level resources. However, policies implemented at a higher level cannot remove access that is granted by policies at a lower level, so the more permissive policy takes precedence. For example, if a project-level policy grants a user modify access to a storage bucket but an organization-level policy only allows view access, the project-level policy allowing modify access would be in effect.

Uploaded by

Rajat
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 1

Resources inherit the policies of their parent resource.

 For instance, if you set a policy at the organization level, it is automatically inherited by all its
children projects. And this inheritance is transitive, which means that all the resources in
those projects inherit the policy too.

There's one important rule to keep in mind.

The policies implemented at a higher level in this hierarchy can't take away access that's granted
at a lower level.

 For example, suppose that a policy applied on the bookshelf project gives user Pat the right
to modify a cloud storage bucket, but a policy at the organization level says that Pat can only
view cloud storage buckets not change them. The more generous policy is the one that takes
effect. Keep this in mind as you design your policies.

You might also like