Skip to main content
Actions available to Object Storage users with specific roles are based on the Amazon S3 API methods.

​
Available actions per role

Object Storage roles support the following actions:
Actionstorage.object-viewerstorage.object-listerstorage.editorstorage.viewerstorage.uploaderstorage.object-editor
GetObject✓—✓✓—✓
HeadObject✓—✓✓—✓
PutObject——✓—✓✓
DeleteObject——✓——✓
DeleteObjects——✓——✓
ListObjectsV2—✓✓✓—✓
ListObjects—✓✓✓—✓
ListObjectVersions—✓✓✓—✓
CreateMultipartUpload——✓—✓✓
CompleteMultipartUpload——✓—✓✓
AbortMultipartUpload——✓—✓✓
ListMultipartUploads——✓✓✓✓
UploadPart——✓—✓✓
UploadPartCopy——✓—✓✓
CopyObject——✓—✓✓
PostObject——✓—✓✓
HeadBucket——✓✓✓—
CreateBucket——✓———
GetBucketLifecycleConfiguration——✓✓✓—
PutBucketLifecycleConfiguration——✓———
PutBucketCORS——✓———
PutBucketVersioning——✓———
GetBucketVersioning——✓✓✓—
GetBucketLocation——✓✓✓—
Note that the CopyObject and UploadPartCopy actions require roles that have both Download and Upload permissions.
For example, to be able to copy an object, the user needs to have one of the following roles or combinations of roles:
  • storage.viewer + storage.uploader
  • storage.object-viewer + storage.uploader
  • storage.editor
  • storage.object-editor