Configuring Cloud Identity. Considerations include:

• Managing Cloud Identity
• Configuring Google Cloud Directory Sync
• Managing super administrator account
• Automating user lifecycle management process
• Administering user accounts and groups programmatically

Managing service accounts. Considerations include:

• Protecting and auditing service accounts and keys
• Automating the rotation of user-managed service account keys
• Identifying scenarios requiring service accounts
• Creating, authorizing, and securing service accounts
• Securely managing API access management
• Managing and creating short-lived credentials

Managing authentication. Considerations include:

• Creating a password policy for user accounts
• Establishing Security Assertion Markup Language (SAML)
• Configuring and enforcing two-factor authentication

Managing and implementing authorization controls. Considerations include:

• Managing privileged roles and separation of duties
• Managing IAM permissions with basic, predefined, and custom roles
• Granting permissions to different types of identities
• Understanding the difference between Cloud Storage IAM and ACLs
• Designing identity roles at the organization, folder, project, and resource level
• Configuring Access Context Manager

Defining resource hierarchy. Considerations include:

• Creating and managing organizations
• Designing resource policies for organizations, folders, projects, and resources
• Managing organization constraints
• Using resource hierarchy for access control and permissions inheritance
• Designing and managing trust and security boundaries within Google Cloud projects