Conditional permissions not granting access to managed folder in Google Cloud Platform
I am having an issue granting Admin permissions for a specific user to a specific “Managed Folder” within a storage bucket in GCP. The user is granted “Storage Object Viewer” at the bucket level, and the user is able to see all files and folders in the bucket. I want to grant that user permission to edit/upload/delete files and folders within a single Managed Folder within that bucket.
I believe this should be possible by using a bucket-level policy and granting the user conditional permissions to “Storage Object Admin” and “Storage Folder Admin” permissions to the Managed Folder using the expression: “resource.name.startsWith(‘projects/_/buckets/bucket-name/managedFolders/managed-folder-name‘”.
I have done this, and I can see that the user does indeed have Admin permissions for the Managed Folder, which are inherited from the conditional bucket-level policy, but the permissions do not seem to be effective. That user cannot create/edit/delete folders or files in the Managed Folder. Any advice on troubleshooting would be much appreciated.
Read more here: Source link