A county IT department places staff into security groups such as Pu…

Question

A county IT department places staff into security groups such as PublicWorks-Admins and Finance-Readers so every member inherits the same cloud permissions. Which approach scales access management for the municipality?

Accepted Answer

Group-based access control that assigns permissions to department security groups inherited by all members — Drop someone into the PublicWorks-Admins group and they automatically get the keys that group already holds—no rewriting fifty separate policies. Groups are how cities scale permissions without drowning in one-off accounts. Shared root passwords and owner-for-everyone guest accounts are the opposite of that discipline.

Answer

Creating a unique IAM policy document for each employee with no shared group membership

Answer

Sharing one root account password across an entire department for convenience

Answer

Disabling identity federation so every contractor uses local guest accounts with owner rights

A county IT department places staff into security groups such as PublicWorks-Admins and Finance-Readers so every member inherits the same cloud permissions. Which approach scales access management for the municipality?

Short Explanation

Full Explanation