Google Professional ChromeOS Administrator ChromeOS-Administrator Question # 32 Topic 4 Discussion

To delegate ChromeOS device management specifically for theMarketing OU, create acustom rolewith"Chrome Management permissions"and assign it specifically to theMarketing devices OU. This ensures that the delegated admin can manage only the devices within that specific OU without impacting the entire organization.

Verified Answer from Official Source:

The correct answer is verified from theGoogle Admin Console Role Management Guide, which recommends assigning roles at the appropriate OU level for granular access control.

"Assign roles to specific OUs to limit administrative control to relevant organizational units, such as the Marketing devices OU."

By targeting the role to the Marketing devices OU, you ensure that the delegated admin does not have unnecessary access to devices in other parts of the organization, maintaining the principle of least privilege.

Objectives:

Implement delegated administration for specific OUs.

Limit administrative scope to enhance security.