Describes options for setting object ACLs.

| JSON representation |
|---|
| ``` { "accessControlsUpdates": { object (`https://docs.cloud.google.com/storage/docs/storagebatchoperations/reference/rest/v1/SetObjectAcls#AccessControlsUpdates`) } } ``` |

| Fields ||
|---|---|
| `accessControlsUpdates` | ``object (`https://docs.cloud.google.com/storage/docs/storagebatchoperations/reference/rest/v1/SetObjectAcls#AccessControlsUpdates`)`` Required. Add, update, or remove grants from the object's existing ACLs. |

## AccessControlsUpdates

Represents updates to existing access-control entries on an object.

| JSON representation |
|---|
| ``` { "grants": [ { object (`https://docs.cloud.google.com/storage/docs/storagebatchoperations/reference/rest/v1/SetObjectAcls#ObjectAccessControl`) } ], "removeEntities": [ string ] } ``` |

| Fields ||
|---|---|
| `grants[]` | ``object (`https://docs.cloud.google.com/storage/docs/storagebatchoperations/reference/rest/v1/SetObjectAcls#ObjectAccessControl`)`` Optional. Grants to add or update. If a grant for same entity exists, its role is updated. |
| `removeEntities[]` | `string` Optional. Entities for which all grants should be removed. An entity can't be in both `grants` and `removeEntities`. |

## ObjectAccessControl

Represents an access control entry on an object.

| JSON representation |
|---|
| ``` { "entity": string, "role": string } ``` |

| Fields ||
|---|---|
| `entity` | `string` Required. The entity holding the permission, in one of the following forms: - `allUsers` - `allAuthenticatedUsers` |
| `role` | `string` Required. The role to grant. Acceptable values are: - `READER` - gives read access to the object. - `OWNER` - gives owner access to the object. |