ObjectAccessControls: insert

Creates a new ACL entry on the specified object. Try it now.

Important: This method fails with a 400 Bad Request response for buckets with uniform bucket-level access enabled. Use storage.buckets.getIamPolicy and storage.buckets.setIamPolicy to control access instead.

Request

HTTP request

POST https://storage.googleapis.com/storage/v1/b/bucket/o/object/acl

Parameters

Parameter name	Value	Description
Path parameters
bucket	string	Name of a bucket.
object	string	Name of the object. For information about how to URL encode object names to be path safe, see Encoding URI path parts.
Optional query parameters
generation	long	If present, selects a specific revision of this object (as opposed to the latest version, the default).
userProject	string	The project to be billed for this request. Required for Requester Pays buckets.

Request body

In the request body, supply an ObjectAccessControls resource with the following properties:

Property name	Value	Description	Notes
Required Properties
entity	string	The entity holding the permission, in one of the following forms: user-userId user-email group-groupId group-email domain-domain project-team-projectId allUsers allAuthenticatedUsers Examples: The user [e-mail] would be [e-mail]. The group [e-mail] would be [e-mail]. To refer to all members of the G Suite for Business domain example.com, the entity would be domain-example.com.	writable
role	string	The access permission for the entity. Acceptable values are: "OWNER" "READER"	writable

Response

If successful, this method returns an ObjectAccessControls resource in the response body.

Try it!

Use the APIs Explorer below to call this method on live data and see the response.