gsutil iam

gsutil iam get, set, or change bucket and/or object IAM permissions.

gsutil iam ch

gsutil iam ch serviceAccount:${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com:objectViewer ${BUCKET_NAME}
gsutil iam ch serviceAccount:${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com:objectCreator ${BUCKET_NAME}
gsutil iam ch serviceAccount:${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com:legacyBucketReader ${BUCKET_NAME}

See also

• gsutil iam
• gsutil [ config | singurl | mb | iam | cp | ls | acl | defacl | ubla | du | --help], $HOME/.boto, Cloud Shell