Roles and permissions

These are the built-in roles for the Storage service. Each row lists a role, what it grants, and the exact permissions it includes. Roles are system-defined (built-in) or custom; permissions are system-defined and read-only. The platform-wide Viewer, Editor, and Admin roles also apply across every service; see the roles and permissions catalogue. You can also compose a custom role from any of these permissions.

Role	Included permissions
Storage Viewer Read-only access to all storage resources	storage.bucket.get storage.bucket.list storage.multipartupload.list storage.object.get storage.object.list storage.operation.get storage.operation.list storage.storageclass.get storage.storageclass.list
Storage Editor Read and write access to all storage resources	storage.bucket.create storage.bucket.get storage.bucket.list storage.bucket.update storage.multipartupload.complete storage.multipartupload.create storage.multipartupload.list storage.object.copy storage.object.create storage.object.get storage.object.list storage.operation.get storage.operation.list storage.presignedurl.create storage.storageclass.create storage.storageclass.get storage.storageclass.list storage.storageclass.update
Storage Admin Full access to all storage resources	storage.bucket.create storage.bucket.delete storage.bucket.get storage.bucket.list storage.bucket.update storage.multipartupload.complete storage.multipartupload.create storage.multipartupload.delete storage.multipartupload.list storage.object.copy storage.object.create storage.object.delete storage.object.get storage.object.list storage.operation.get storage.operation.list storage.presignedurl.create storage.storageclass.create storage.storageclass.delete storage.storageclass.get storage.storageclass.list storage.storageclass.update
Bucket Viewer View buckets	storage.bucket.get storage.bucket.list storage.operation.get storage.operation.list
Bucket Editor View and manage buckets	storage.bucket.create storage.bucket.get storage.bucket.list storage.bucket.update storage.operation.get storage.operation.list
Bucket Admin Full access to buckets	storage.bucket.create storage.bucket.delete storage.bucket.get storage.bucket.list storage.bucket.update storage.operation.get storage.operation.list
Object Viewer View storage objects	storage.multipartupload.list storage.object.get storage.object.list storage.operation.get storage.operation.list
Object Editor View and manage storage objects	storage.multipartupload.complete storage.multipartupload.create storage.multipartupload.list storage.object.copy storage.object.create storage.object.get storage.object.list storage.operation.get storage.operation.list storage.presignedurl.create
Object Admin Full access to storage objects	storage.multipartupload.complete storage.multipartupload.create storage.multipartupload.delete storage.multipartupload.list storage.object.copy storage.object.create storage.object.delete storage.object.get storage.object.list storage.operation.get storage.operation.list storage.presignedurl.create
StorageClass Viewer View storage classes	storage.operation.get storage.operation.list storage.storageclass.get storage.storageclass.list
StorageClass Editor View and manage storage classes	storage.operation.get storage.operation.list storage.storageclass.create storage.storageclass.get storage.storageclass.list storage.storageclass.update
StorageClass Admin Full access to storage classes	storage.operation.get storage.operation.list storage.storageclass.create storage.storageclass.delete storage.storageclass.get storage.storageclass.list storage.storageclass.update

Related

• Storage overview
• The authorization model
• Roles and permissions catalogue