Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Issues with Setting Up Access Control for Google Cloud Storage Buckets

Hi all, I’m trying to configure access control for my Google Cloud Storage buckets but am having trouble setting the correct permissions. I’ve followed the documentation, but some users are still unable to access the files they need. Can anyone help me troubleshoot this issue and ensure the correct IAM policies are in place?

0 4 235
4 REPLIES 4

Hi, @ewanmacgregor.

Could you please let me know which IAM roles have been provided for this? What error did the user encounter? Have you used the IAM Analyzer tool to analyze this issue?

Regards,
Mokit

No, I didn't use IAM Analyzer Tool. We are encountering issues with setting up access control for Google Cloud Storage buckets on our website, irishkiltshop.com. Plz Suggest the solution.

Hi @ewanmacgregor

It sounds like there might be an issue with IAM policies, ACLs, or organization-wide restrictions causing access problems. Here are some steps to troubleshoot and fix the issue:

  • You can use the Policy Troubleshooter to determine why a user can or cannot access a resource by analyzing allow policies, deny policies, and any Principal Access Boundary (PAB) policies in effect.
  • Ensure users are granted the appropriate IAM roles at the project or bucket level. You can follow this document to check IAM policy for your project. Pay close attention to any custom roles you've created and ensure they contain the necessary permissions.
  • If you're using ACLs in addition to IAM, verify that the correct users or groups have the required access at both the bucket and object levels. IAM policies generally override ACLs. If you're primarily using IAM, ensure that ACLs aren't inadvertently restricting access. It's often best practice to rely solely on IAM for access control.
  • If the issue persists, you may contact Google Cloud Support. They can investigate your specific project and account for any underlying issues. When contacting them, provide detailed information

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.

Thank you so much