Access Control

The Object Storage service provides an interface for imposing Access Control on the data contained in a Bucket via Owners.

Bucket Owners

Each Bucket has its own set of owners which enforces who can access the data in a Bucket. There are two different kinds of Owners:

• Users, representing human access to data
• Service Accounts, representing programmatic access to data

A Bucket can have more than one Owner. A Bucket can have both Users and Service Accounts as Owners at the same time.

Management and Data Access

The Access Control imposed via Owners only applies to operation for accessing data in the Bucket, i.e. interacting with Objects, Object Metadata, Object Versions, and Object Locks. The management of the Bucket itself is not restricted by the list of Owners and is open to anyone in the Organisation.