{"id":7167,"date":"2026-09-20T18:51:15","date_gmt":"2026-09-20T18:51:15","guid":{"rendered":"https:\/\/prwatech.in\/blog\/?p=7167"},"modified":"2026-09-21T15:31:46","modified_gmt":"2026-09-21T15:31:46","slug":"creating-a-bucket-giving-permissions-using-cloud-console","status":"publish","type":"post","link":"https:\/\/prwatech.in\/blog\/google-cloud-platform\/cloud-storage\/creating-a-bucket-giving-permissions-using-cloud-console\/","title":{"rendered":"Creating a bucket & giving permissions using cloud console"},"content":{"rendered":"\r\n

Creating a Bucket and Setting Permissions With gsutil<\/h1>\r\n

This covers creating a Cloud Storage bucket and managing basic object level permissions entirely from the command line, using gsutil, the tool included with the Google Cloud SDK. Everything here has a console equivalent, but the command line version is what you want once you are scripting a setup rather than clicking through it by hand.<\/p>\r\n

Object level ACL commands, the kind used partway through this guide, only work on a bucket still using Fine Grained access control. If your bucket uses Uniform access control, the current default for new buckets, these specific commands will not apply, and permissions need to be managed through IAM instead.<\/p>\r\n

Step 1: Activate Cloud Shell<\/h2>\r\n\r\n\r\n\r\n

Click on Activate Cloud Shell<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 2: Create a Bucket<\/h2>\r\n

gsutil mb -l LOCATION gs:\/\/BUCKET_NAME<\/p>\r\n

Replace LOCATION and BUCKET_NAME with your own values, and make sure there is no space anywhere inside the gs colon slash slash URL itself.<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Give the Authorization if asked.<\/p>\r\n\r\n\r\n\r\n

\"\"<\/figure>\r\n\r\n\r\n\r\n

Step 3: List Your Buckets<\/h2>\r\n

gsutil ls gs:\/\/<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 4: List a Bucket’s Contents<\/h2>\r\n

gsutil ls gs:\/\/BUCKET_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 5: List Contents With Details<\/h2>\r\n

gsutil ls -l gs:\/\/BUCKET_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 6: Show Details for One File<\/h2>\r\n

gsutil ls -l gs:\/\/BUCKET_NAME\/FILE_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 7: Remove a Single File<\/h2>\r\n

gsutil rm gs:\/\/BUCKET_NAME\/FILE_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 8: Grant Read Permission to a Specific User<\/h2>\r\n

The acl ch command changes an object’s ACL. The u flag targets a specific user by email, and R grants read access, letting that person view or download the file without any other permissions.<\/p>\r\n

gsutil acl ch -u user@example.com:R gs:\/\/BUCKET_NAME\/FILE_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 9: Grant Owner Permission to a Specific User<\/h2>\r\n

The O value grants full ownership of the object, including the ability to change its permissions further or delete it. Grant this only to someone who genuinely needs that level of control, and never to AllUsers, which would mean granting it to anyone on the internet with no restriction at all.<\/p>\r\n

gsutil acl ch -u user@example.com:O gs:\/\/BUCKET_NAME\/FILE_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 10: Remove a User’s Permission Entirely<\/h2>\r\n

gsutil acl ch -d user@example.com gs:\/\/BUCKET_NAME\/FILE_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 11: Remove Every File Under a Folder Like Path<\/h2>\r\n

The r flag makes this recursive, removing every object under the given prefix, which is different from removing a single file as shown earlier.<\/p>\r\n

gsutil rm -r gs:\/\/BUCKET_NAME\/FOLDER_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 12: Remove a Bucket<\/h2>\r\n

gsutil rm -r gs:\/\/BUCKET_NAME<\/p>\r\n

This removes every object in the bucket, then the bucket itself.<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n\r\n\r\n\r\n

Step 13: Create a Bucket in a Different Project<\/h2>\r\n

gsutil mb -p PROJECT_NAME -c STORAGE_CLASS -l LOCATION gs:\/\/BUCKET_NAME<\/p>\r\n\r\n\r\n\r\n

\r\n
\"\"<\/figure>\r\n<\/div>\r\n

Common Mistakes to Avoid<\/h2>\r\n