Roles can be assigned on which two levels in IAM? (Choose two.)
Roles can be assigned on which two levels in IAM? (Choose two.)
Roles in IAM can be assigned at two primary levels: the platform and the service. Platform roles pertain to managing resources at the account level, including user access, creation of service instances, and other account management activities. Service roles relate to the permissions and actions users can take for specific services within the cloud environment. This distinction allows for granular control over access and capabilities within an organization's cloud infrastructure.
from the ref. : Roles IBM Cloud IAM access roles allow users and service IDs to complete specific tasks within the context of the target resources that are defined in the policy. There are two types of predefined access roles: platform management and service access. The third type of access role is a custom role that you can create for a service to combine any set of available actions to meet your organizational needs. Platform management roles define allowable actions, such as assigning user access and creation of service instances, for managing resources at the platform level. Platform roles also apply to actions that can be taken within the context of account management services, such as inviting and removing users, managing access groups, managing service IDs, and private catalog offerings.