Cloud Storage has two access control systems. IAM grants roles on the project or on a bucket (and, with managed folders, on prefixes), such as Storage Object Viewer, Storage Object Creator or Storage Admin. Access control lists (ACLs) are an older, finer-grained system that can grant access on individual objects. Using both makes it hard to know who can read what.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.