Help Center/ Object Storage Service/ Permissions Configuration Guide (Ally Region)/ Permission Configuration in Typical Scenarios/ Granting Permissions to Other Accounts/ Granting Other Accounts Specific Permissions for Specific Objects
Updated on 2026-03-17 GMT+08:00
View PDF
Share

Granting Other Accounts Specific Permissions for Specific Objects

Scenario

This section describes how to grant other accounts the permissions to download an object from a bucket.

To grant other permissions, select required actions from Action Name in the bucket policy. For details about the actions supported by OBS, see Action/NotAction.

For details about how to grant permissions to an IAM user, see Granting IAM Users Under an Account the Access to a Bucket and the Resources in It.

Recommended Configuration

Use bucket policies to grant permissions to other accounts.

Precautions

After configuration, they can download objects using APIs. However, if they download objects using OBS Console or OBS Browser+, a message will be displayed indicating that they do not have the required permissions.

When they log in to OBS Console or OBS Browser+, APIs (such as ListAllMyBuckets and ListBucket) are called to load the bucket list and object list and some other APIs will also be called on other pages, but their permissions do not cover those APIs. In such case, the message is displayed.

Procedure

  1. In the bucket list, click the bucket name you want to go to the Overview page.
  2. In the navigation pane, choose Permissions.