Access control list

During vault conversion, the system maintains the ACL behavior. You can change the ACL after vault conversion.

A System Administrator can grant a user individual object READ permission using the Cloud Storage Object API's PUT Object ACL operation. Then the user can switch between the ACL options that:

Grant read access to all object data and metadata, and grant list access to the container or vault, or
Grant list access only, to the container or vault.