Question 26

Correct answer: A

A. Utilizing the Google Groups API allows you to programmatically manage Google Groups. By setting a condition in the code to check the 'role' attribute of the user before creating a Group, you can enforce the policy where only managers can create new Groups. This approach ensures that Group creation is restricted to users with the specified role, thereby enforcing the policy effectively.

B. While the Admin SDK Directory API can be used to manage Google Groups, setting the 'whoCanCreateGroup' attribute to "Managers" does not provide a granular control over Group creation based on user roles. This approach may restrict Group creation to managers, but it does not allow for programmatically enforcing the policy where only managers can create new Groups.

C. The Google Workspace Audit API is used for monitoring and analyzing audit logs, not for programmatically managing Google Groups. Filtering logs to monitor non-manager Group creation and manually deleting them is a reactive approach that does not automate the enforcement of the policy where only managers can create new Groups. Utilizing this API does not provide the necessary functionality to programmatically manage Google Groups based on user roles.

D. The Google Drive API is not the appropriate API for managing Google Groups and enforcing the policy where only managers can create new Groups. Restricting Group creation to folders owned by managers does not directly address the requirement to programmatically manage Google Groups based on user roles.