DefaultObjectAccessControls: insert

Creates a new default object ACL entry on the specified bucket.

Required permissions

To use this method, the authenticated user must have the following IAM permissions for the bucket:

Important: This method fails with a 400 Bad Request response for buckets with uniform bucket-level access enabled. Use storage.buckets.getIamPolicy and storage.buckets.setIamPolicy to control access instead.

POST https://storage.googleapis.com/storage/v1/b/bucket/defaultObjectAcl

In addition to standard query parameters, the following query parameters apply to this method.

To see an example of how to include query parameters in a request, see the JSON API Overview page.

Parameter name	Value	Description
Path parameters
`bucket`	`string`	Name of a bucket.

In the request body, supply a DefaultObjectAccessControls resource with the following properties:

Property name Value Description Notes

Property name	Value	Description	Notes
Required Properties
`entity`	`string`	The entity holding the permission, in one of the following forms: `user-email` `group-groupId` `group-email` `domain-domain` `project-team-projectId` `allUsers` `allAuthenticatedUsers` Examples: The user `liz@example.com` would be `user-liz@example.com`. The group `example@googlegroups.com` would be `group-example@googlegroups.com`. To refer to all members of the domain `example.com`, the entity would be `domain-example.com`.	writable
`role`	`string`	The access permission for the entity. Acceptable values are: "`OWNER`" "`READER`"	writable

Required Properties

entity

string

The entity holding the permission, in one of the following forms:

Examples:

The user liz@example.com would be user-liz@example.com.
The group example@googlegroups.com would be group-example@googlegroups.com.
To refer to all members of the domain example.com, the entity would be domain-example.com.

writable

role

string

The access permission for the entity.

Acceptable values are:

writable

If successful, this method returns a DefaultObjectAccessControls resource in the response body.

Use the APIs Explorer below to call this method on live data and see the response.