Docs

Torch Object Storage

Authorizing IAM users of the current account

Allowing an IAM user to delete a bucket

This topic explains how to allow an IAM user of the current account to delete a bucket.

Scenario

Notes

If a configured permission does not take effect, we recommend that you retry later, as there is a delay.

The permission we will grant in this topic only enables users to delete empty buckets.

Steps

In the left navigation pane, click Buckets. In the Buckets list, click the bucket you want to manage.

Visual view

JSON view

On the Create Bucket Authorization Policy page, select Custom Policy and click Next.

Category	Parameter	Description
Basic configuration	Policy configuration method	Use the default option, i.e., Visual view.
Basic configuration		Policy name	Enter a name for the policy. The policy name must be unique within a bucket.
Effect	Effect	Select the effect of the policy. In this example, use the default value. Allow (Default): Allows the matched requests. Deny: Denies the matched requests.
Authorized user	Authorized user	Use the default option, i.e., Specified account.
Authorized user		Other accounts	Select Current main account. Then, click Add Field and select the IAM user you want to authorize from the drop-down menu under Sub account name. In this example, we use iamuser.
Resource	Resource scope	Select Current bucket.
Action	General Action	Leave this section empty.
		Bucket Action	Select DeleteBucket.
		Object Action	Leave this section empty.
		Operational strategy	Use the default option, i.e., Include the above actions. This option allows users to perform the specified actions.
Condition (Optional)	-	Click the Add Field icon and set the condition and value. For more information, see Conditions.

Next steps

Once the bucket policy has been created, the IAM user can delete the bucket via an API or SDK.

Last updated: 2026.08.14 16:23:30