How can I set this permission for a user? I only see a relevant Storage > Storage admin which provides storage.buckets.*, however I don't want this user account to have such broad permissions.
I have determined the above information from this page: https://cloud.google.com/storage/docs/access-control/iam-roles
I would like a user to have read only permissions to a bucket.
You can use ACLs over objects and buckets. You can give ”READER” permission for a particular user on bucket level. By giving this, the user can only read and download the object’s data.
A second approach is to give the user a Legacy Bucket IAM roles. You can give “Storage Legacy Bucket Reader ” role, which also gives the user ‘read only’ option. More details regarding this role can be found in this help center article.
Google has IAM Custom Roles in beta. You can use this to create a new role with the exact permission set you want.
