Your question is Least Privilege IAM Design. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How would you use IAM to manage access control for the application’s users and services, ensuring that each entity has the minimum permissions required?
Explain how you would model human and workload identities, select predefined or custom Google Cloud IAM roles, scope permissions, handle temporary access, and prevent privilege escalation. Include how you would verify permissions and monitor for excessive or anomalous access.