BucketAccessControls: get

Returns the ACL entry for the specified entity on the specified bucket.

Important: This method fails with a400 Bad Request response for buckets with uniform bucket-level access enabled. Usestorage.buckets.getIamPolicyandstorage.buckets.setIamPolicyto control access instead.

Required permissions

The authenticated user must have the following IAM permissions on the bucket touse this method:

  • storage.buckets.get
  • storage.buckets.getIamPolicy
As an alternative to having IAM permissions, the authenticated user can use thismethod by having theOWNER ACL permission for the bucket.

Request

HTTP request

GET https://storage.googleapis.com/storage/v1/b/bucket/acl/entity

In addition tostandard query parameters, the following query parameters apply to this method.

To see an example of how to include query parameters in a request, see theJSON API Overview page.

Parameters

Parameter nameValueDescription
Path parameters
bucketstring Name of an existingbucket.
entitystring The entity holding the permission. Can beuser-emailAddress,group-groupId,group-emailAddress,allUsers, orallAuthenticatedUsers.

Request body

Do not supply a request body with this method.

Response

If successful, this method returns aBucketAccessControls resource in the response body.

Try it!

Use the APIs Explorer below to call this method on live data and see the response.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.