Exam ChromeOS-Administrator Topic 5 Question 51 Discussion

* Granular Control: It allows you to select the specific permissions needed for the Help Desk administrators. This ensures they can do their job without having excessive access that could be misused.
* Flexibility: You can easily adjust the permissions later if the Help Desk's responsibilities change.
* Auditing: The Google Admin console tracks changes made by each role, making it easier to identify the source of any unauthorized actions.
* How to Create a Custom Admin Role:
* Go to the Google Admin console.
* Navigate to Admin roles.
* Click Create new role.
* Give the role a descriptive name (e.g., "Help Desk Support").
* Carefully select the privileges the Help Desk needs (e.g., reset passwords, manage user accounts, view device information).
* Assign the role to the Help Desk administrators.
Why Other Options Are Less Ideal:
* A. Service Desk Group: Groups are primarily for organization and don't provide granular permission control.
* C. Services Admin Role: This role has broader permissions than what a Help Desk typically needs, violating the PoLP.
* D. Full Access: This grants excessive privileges and significantly increases the risk of accidental or intentional misuse.