If you need to grant another account read or write permission to a bucket or its access control list (ACL), you can configure the bucket ACL directly. For instructions, see Configuring bucket ACLs.

Steps

In the left navigation pane, click Buckets. In the Buckets list, click the bucket you want to manage.

In the left navigation pane, select Permissions > Bucket policies.

On the Bucket policies page, click the Visual view tab and then click Create policy.

Configure the policy details based on the scenario.

Grant read and write access to a bucket

Grant specified bucket permissions

Grant read and write access to specified resources

Granting specified permissions for specific resources

Select Bucket Read and Write, and click Next.

Adjust the following parameters and leave the rest at their default settings.

Category

Description

Category	Description
Authorized user	Select Specified account and Other main account. The process varies depending on whom you want to authorize. To authorize another account, just enter the account ID. To authorize IAM users of another account, enter the account ID. Then, click Add Field to enter an IAM username under Sub account name.

Select Bucket Read and Write, and click Next.

Adjust the following parameters and leave the rest at their default settings.

Category

Description

Category	Description
Authorized user	Select Specified account and Other main account. The process varies depending on whom you want to authorize. To authorize another account, just enter the account ID. To authorize IAM users of another account, enter the account ID. Then, click Add Field to enter an IAM username under Sub account name.
Action	Select the action(s) to be authorized. For more information, see Supported actions.

Select Folder Read and Write, and click Next.

Adjust the following parameters and leave the rest at their default settings.

Category

Description

Category	Description
Authorized user	Select Specified account and Other main account. The process varies depending on whom you want to authorize. To authorize another account, just enter the account ID. To authorize IAM users of another account, enter the account ID. Then, click Add Field to enter an IAM username under Sub account name.
Resource	Select Specified object(s), and click the Add Field icon to specify the object(s). Follow these guidelines when specifying a resource: Resource paths can contain Chinese characters, letters, numbers, and common symbols. Resource paths can point to the entire bucket, an object, or a directory. When granting permissions to a directory, use a wildcard () at the end, for example, test/. Resource paths cannot start with a forward slash (/) or backslash (\). Consecutive forward slashes (/) are not allowed. .. cannot be used as a directory name.

Select Folder Read and Write, and click Next.

Adjust the following parameters and leave the rest at their default settings.

Category

Description

Category	Description
Authorized user	Select Specified account and Other main account. The process varies depending on whom you want to authorize. To authorize another account, just enter the account ID. To authorize IAM users of another account, enter the account ID. Then, click Add Field to enter an IAM username under Sub account name.
Resource	Select Specified object(s), and click the Add Field icon to specify the object(s). Follow these guidelines when specifying a resource: Resource paths can contain Chinese characters, letters, numbers, and common symbols. Resource paths can point to the entire bucket, an object, or a directory. When granting permissions to a directory, use a wildcard () at the end, for example, test/. Resource paths cannot start with a forward slash (/) or backslash (\). Consecutive forward slashes (/) are not allowed. .. cannot be used as a directory name.
Action	Select the action(s) to be authorized. For more information, see Supported actions.

Save your settings by clicking Next.

After verifying the details, click Create.

Then, you will see the bucket policy that you just created in the policy list.

Last updated: 2026.08.14 16:23:30

Public security network record in Beijing: No. 11010802032137