Professional Cloud Security Engineer

Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.

Advanced

Prepare and test your skills

Advanced

Prepare and test your skills

Google Cloud feature

Disable Automatic IAM Grants for Default Service Accounts

Topic in 2 exam domains

Also called: constraints/iam.automaticIamGrantsForDefaultServiceAccounts

An organization policy constraint that blocks default service accounts from automatically receiving the Editor role upon creation.

Where this appears on the exam

2 objectives in 1 of 5 domains

Domain 1
Configuring access
~25% of exam
1. 1.2Managing service accounts
  - Securing and protecting service accounts (including default service accounts).
  - Creating, disabling, and authorizing service accounts.

How learners score on this topic

Last updated October 15, 2026

Professional Cloud Security Engineer

Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.

Advanced

Prepare and test your skills

Advanced

Prepare and test your skills

Google Cloud feature

Disable Automatic IAM Grants for Default Service Accounts

Topic in 2 exam domains

Also called: constraints/iam.automaticIamGrantsForDefaultServiceAccounts

An organization policy constraint that blocks default service accounts from automatically receiving the Editor role upon creation.

Where this appears on the exam

2 objectives in 1 of 5 domains

Domain 1
Configuring access
~25% of exam
1. 1.2Managing service accounts
  - Securing and protecting service accounts (including default service accounts).
  - Creating, disabling, and authorizing service accounts.

How learners score on this topic

Last updated October 15, 2026