ObjectAccessControls: insert

Creates a new ACL entry on the specified object.


HTTP request

POST https://www.googleapis.com/storage/v1/b/bucket/o/object/acl


Parameter name Value Description
Path parameters
bucket string Name of a bucket.
object string Name of the object. For information about how to URL encode object names to be path safe, see Encoding URI Path Parts.
Optional query parameters
generation long If present, selects a specific revision of this object (as opposed to the latest version, the default).

Request body

In the request body, supply an ObjectAccessControls resource with the following properties:

Property name Value Description Notes
Required Properties
entity string The entity holding the permission, in one of the following forms:
  • user-userId
  • user-email
  • group-groupId
  • group-email
  • domain-domain
  • project-team-projectId
  • allUsers
  • allAuthenticatedUsers
  • The user liz@example.com would be user-liz@example.com.
  • The group example@googlegroups.com would be group-example@googlegroups.com.
  • To refer to all members of the Google Apps for Business domain example.com, the entity would be domain-example.com.
role string The access permission for the entity.

Acceptable values are:
  • "OWNER"
  • "READER"


If successful, this method returns an ObjectAccessControls resource in the response body.

Send feedback about...

Cloud Storage Documentation