You are configuring a new application that has gcp video

Full Certification Question

You are configuring a new application that has access to an existing Cloud SQL for PostgreSQL database. The new application reads from this database to gather statistics for a dashboard. You want to follow Google-recommended practices when granting Identity and Access Management (IAM) permissions. What should you do?