This page provides links to the [Identity and Access Management (IAM)](https://docs.cloud.google.com/storage/docs/access-control/iam.md.txt) tables
that apply to Cloud Storage. To learn how to use IAM
with Cloud Storage, see [Using IAM Permissions](https://docs.cloud.google.com/storage/docs/access-control/using-iam-permissions.md.txt).

| Table | Description |
|---|---|
| [IAM permissions for Cloud Storage](https://docs.cloud.google.com/storage/docs/access-control/iam-permissions.md.txt) | IAM permissions that apply to Cloud Storage. |
| [IAM roles for Cloud Storage](https://docs.cloud.google.com/storage/docs/access-control/iam-roles.md.txt) | IAM roles that apply to Cloud Storage and the permissions contained in each role. |
| [IAM permissions for Google Cloud console actions](https://docs.cloud.google.com/storage/docs/access-control/iam-console.md.txt) | IAM permissions that are required to perform actions in the Google Cloud console related to Cloud Storage.^1^ |
| [IAM permissions for Google Cloud CLI commands](https://docs.cloud.google.com/storage/docs/access-control/iam-gcloud.md.txt) | IAM permissions that are required to execute each `gcloud storage` command for Cloud Storage.^1^ |
| [IAM permissions for gsutil commands](https://docs.cloud.google.com/storage/docs/access-control/iam-gsutil.md.txt) | IAM permissions that are required to execute each gsutil command for Cloud Storage.^1^ |
| [IAM permissions for JSON methods](https://docs.cloud.google.com/storage/docs/access-control/iam-json.md.txt) | IAM permissions that are required to use each of the available JSON methods for Cloud Storage.^1^ |
| [IAM permissions for XML requests](https://docs.cloud.google.com/storage/docs/access-control/iam-xml.md.txt) | IAM permissions that are required to use each of the available XML requests for Cloud Storage.^1^ |

^1^ Users can make requests on objects if they have sufficient
permissions in the [access control list](https://docs.cloud.google.com/storage/docs/access-control/lists.md.txt) (ACL) for the desired object,
even if they don't have sufficient IAM permissions.