A finance lead wants a delivery team to link its projects to an existing billing account, but the team must not change the payment method or the account's settings. Which role should be granted on the billing account?
Show answer and explanation
Answer: C
roles/billing.user is the Billing Account User role. It lets a principal link projects to a billing account, which is the step that allows resources in those projects to incur charges there. It does not grant control over payment methods or the account itself. Those controls belong to roles/billing.admin, which is a much wider grant.
Why the other options are wrong
- A. roles/billing.admin has full control of the billing account, including payment methods and account settings. That exceeds the requirement, which is limited to linking projects.
- B. roles/owner is a project-level basic role. It does not grant billing account control, so it cannot serve as the billing permission the team needs.
- D. roles/billing.viewer lets its holder see costs and usage but not link projects. It is read-only, so it cannot meet the linking requirement.