SetObjectAcls

Describes options for setting object ACLs.

JSON representation
{
  "accessControlsUpdates": {
    object (AccessControlsUpdates)
  }
}
Fields
accessControlsUpdates

object (AccessControlsUpdates)

Required. Add, update, or remove grants from the object's existing ACLs.

AccessControlsUpdates

Represents updates to existing access-control entries on an object.

JSON representation
{
  "grants": [
    {
      object (ObjectAccessControl)
    }
  ],
  "removeEntities": [
    string
  ]
}
Fields
grants[]

object (ObjectAccessControl)

Optional. Grants to add or update. If a grant for same entity exists, its role is updated.

removeEntities[]

string

Optional. Entities for which all grants should be removed. An entity can't be in both grants and removeEntities.

ObjectAccessControl

Represents an access control entry on an object.

JSON representation
{
  "entity": string,
  "role": string
}
Fields
entity

string

Required. The entity holding the permission, in one of the following forms:

  • allUsers
  • allAuthenticatedUsers
role

string

Required. The role to grant. Acceptable values are:

  • READER - gives read access to the object.
  • OWNER - gives owner access to the object.