在Google云端存储分区/对象上设置“域”权限-仅UI或API？

Question

Is it possible to set this permission through the Cloud Console UI for cloud storage? Or is it only settable through the API (for example, following the guidance in this post )

In the documentation for Google's cloud storage , one of the defined permission scopes is "domain". This allows you to specify that the read or write permission is granted to any authenticated user that is part of your Google Apps domain.

When accessing a storage container UI in the cloud console, you can set user or group permissions, but entering a naked domain with either "User" or "Group" selected results in an "Invalid Value" message when the changes are saved.

Answer 1

This setting is now exposed via the Cloud Console UI. You should notice 3 sections in the dropdown: user, group, and domain.

The setting is also available via the API and via the command-line utility, gsutil. To grant read access to the domain my-domain.org from gsutil, you'd do something like this:

gsutil acl ch -g my-domain.org:R gs://bucket