DefaultObjectAccessControls: update

Updates a default object ACL entry on the specifiedbucket.

Required permissions

To use this method, the authenticated user must have the following IAM permissionsfor the bucket containing the default object ACL entry:

  • storage.buckets.get
  • storage.buckets.getIamPolicy
  • storage.buckets.setIamPolicy
  • storage.buckets.update
Important: This method fails with a400 Bad Request response for buckets with uniform bucket-level access enabled. Usestorage.buckets.getIamPolicy andstorage.buckets.setIamPolicy to control access instead.

Request

HTTP request

PUT https://storage.googleapis.com/storage/v1/b/bucket/defaultObjectAcl/entity

In addition tostandard query parameters, the following query parameters apply to this method.

To see an example of how to include query parameters in a request, see theJSON API Overview page.

Parameters

Parameter nameValueDescription
Path parameters
bucketstring Name of a bucket.
entitystring The entity holding the permission. Can beuser-emailAddress,group-groupId,group-emailAddress,allUsers, orallAuthenticatedUsers.

Request body

In the request body, supply aDefaultObjectAccessControls resource.

Response

If successful, this method returns aDefaultObjectAccessControls resource in the response body.

Try it!

Use the APIs Explorer below to call this method on live data and see the response.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-19 UTC.