Group A requires access to all data. Which action should you take in IAM to satisfy this requirement?

• A. Create a custom label excluding 'restricted' namespace for Group A.
• B. Create a new data access scope to limit access for Group A.
• C. Create a new data access scope to allow access to all data for Group A; assign in IAM.
• D. Grant data access to 'restricted' namespace for Group A.

Answer: (C)

In IAM, data access is controlled by data access scopes that define exactly which data resources a group or principal can reach. If Group A must see all data, you create a data access scope that includes all data and then assign that scope to Group A. This provides the broadest permissible access, matching the requirement to have access to everything. The other options would either exclude or limit data to certain areas (like excluding a namespace or limiting the scope) or grant access only to a subset (such as the restricted namespace), which wouldn’t meet the “all data” need.