Home Microsoft Exams Google Cloud Exams Pricing

Loading page

Curious about new developments and updates? Follow our social media.

Get a free certification question every week.

Microsoft Exams

AZ-104 Administrator
AZ-204 Developer
AZ-900 Fundamentals
All Microsoft Exams

Google Cloud Exams

Associate Data Practitioner
All Google Cloud Exams

Features

Readiness assessment
Practice tests
Focused practice
Explanations & AI tutor
Study guides & quizzes

Compare

vs Tutorials Dojo
All comparisons

Terms Privacy Cookies About Pricing

© 2026 StudyCerts. All rights reserved.

StudyCerts is an independent service and is not affiliated with, endorsed by, or sponsored by any certification body or cloud provider.

Loading page

Home
Google Cloud Exams
GCP
Professional Cloud Architect
Topics
Identity and Access Management

Professional Cloud Architect

Design, plan, and manage secure, scalable, and highly available solutions on Google Cloud, and track your readiness for the Professional Cloud Architect exam Domain by Domain.

Intermediate

Prepare and test your skills

Description
Sample Question
Free Trial
Practice Test

Intermediate

Prepare and test your skills

Description
Sample Question
Free Trial
Practice Test

Google Cloud service

Identity and Access Management

Topic in 19 exam domains

Identity and Access Management · Service
Identity and Access Management · Feature
Identity and access management · Service

Also called: Cloud IAM, Google Cloud Identity Access and Management, Google Cloud Identity access management, Google Cloud Identity and Access Management, Google IAM, Google Identity and Access Management, IAM, Identity and Access Management (IAM) API

Google Cloud's access control service that establishes fine-grained permissions and roles.

Where this appears on the exam

19 objectives in 5 of 6 domains

Domain 1
Designing and planning a cloud solution architecture
~25% of exam
1. 1.1Designing a cloud solution infrastructure that meets business requirements
  - Integration patterns with external systems
  - Security and compliance
Domain 2
Managing and provisioning a cloud solution infrastructure
~17.5% of exam
Domain 3
Designing for security and compliance
~17.5% of exam
1. 3.1Designing for security
2. 3.2Designing for compliance
  - Industry certifications (e.g., SOC 2)
  - Audits (including logs)
Domain 4
Analyzing and optimizing technical and business processes
~15% of exam
1. 4.1Analyzing and defining technical processes
  - Service catalog and provisioning
2. 4.2Analyzing and defining business processes
  - Change management
Domain 5
Managing implementation
~12.5% of exam
1. 5.1Advising development and operation teams to ensure the successful deployment of the solution
  - Data and system migration and management tooling
2. 5.2Interacting with Google Cloud programmatically
  - Cloud Emulators (e.g., Bigtable, Spanner, Pub/Sub, and Firestore)
  - Accessing Google API best practices

Related topics

Application Default CredentialsFeature VPC Service ControlsService

Identity and Access ManagementService

tagsFeature Kubernetes RBACFeature Cloud LoggingService Cloud StorageService BigQueryService Database Migration ServiceService Cloud RunService Compute EngineService Cloud Service MeshService custom rolesConcept Secret ManagerService Workforce Identity FederationFeature FirestoreService Managed Service for Apache AirflowService GKEService Cloud SQLService

Points to what builds on itWorks with or alternative to

Identity and Access Management secures Cloud Service Mesh
custom roles is part of Identity and Access Management
Cloud SQL works with Identity and Access Management
Identity and Access Management works with tags
Identity and Access Management secures Database Migration Service
Identity and Access Management secures Firestore
Cloud Storage works with Identity and Access Management
Identity and Access Management secures Secret Manager
Application Default Credentials works with Identity and Access Management
Identity and Access Management secures BigQuery
Identity and Access Management secures Cloud Storage
Identity and Access Management works with Kubernetes RBAC
BigQuery works with Identity and Access Management
Cloud Service Mesh works with Identity and Access Management
Identity and Access Management works with Workforce Identity Federation
Cloud Run works with Identity and Access Management
Identity and Access Management depends on Application Default Credentials
Identity and Access Management secures Compute Engine
Identity and Access Management is an alternative to Kubernetes RBAC
Identity and Access Management secures Managed Service for Apache Airflow
Identity and Access Management configures Secret Manager
Identity and Access Management works with VPC Service Controls
Workforce Identity Federation is part of Identity and Access Management
Workforce Identity Federation depends on Identity and Access Management
GKE depends on Identity and Access Management
Identity and Access Management secures Cloud Run
Identity and Access Management configures GKE
Managed Service for Apache Airflow depends on Identity and Access Management
Firestore depends on Application Default Credentials
Application Default Credentials works with Cloud Storage
Application Default Credentials secures BigQuery
BigQuery depends on Application Default Credentials
Application Default Credentials works with Firestore
BigQuery is an alternative to Cloud Storage
Cloud SQL works with Database Migration Service
BigQuery works with Cloud Logging
BigQuery works with Cloud Storage
Application Default Credentials works with BigQuery
Application Default Credentials works with Secret Manager
BigQuery works with Cloud SQL
Cloud Run works with Cloud SQL
Application Default Credentials works with Compute Engine
VPC Service Controls secures BigQuery
Application Default Credentials secures Cloud Storage
Cloud Storage depends on Application Default Credentials
Cloud SQL works with Cloud Storage
Cloud SQL works with Compute Engine
Cloud Run works with Cloud Storage
Cloud Run works with Secret Manager
Managed Service for Apache Airflow works with Secret Manager
Application Default Credentials secures Compute Engine
Cloud Storage works with Database Migration Service
Secret Manager depends on Application Default Credentials
Cloud Logging works with Cloud Service Mesh
Cloud Run works with Cloud Service Mesh
Cloud Service Mesh works with VPC Service Controls
Compute Engine works with Secret Manager
Cloud Logging works with Cloud SQL
Cloud Run depends on Application Default Credentials
Cloud SQL depends on Compute Engine

How learners score on this topic

Last updated October 14, 2026

Study this topic

Overview
Where this appears on the exam
Related topics

How learners score on this topic