In the S3 Console app, the following rules apply to permissions:
- You can view and browse buckets and objects that you are given access to.
- Only bucket owners have the ability to view policies or assign them to buckets, even if you are provided access to those buckets.
- Only an admin can assign roles to bucket owners to provide the proper privileges for them to be able to configure and view bucket policies.
The following HCP for cloud scale roles can be applied and allow/disallow bucket owners to:
- Set sync-to replication policies: data:bucket:sync:to:set
- Set sync-from replication policies: data:bucket:sync:from:set
- View sync-to and sync-from replication policies: data:bucket:sync:get
Note: You are required to have s3:user:generate_credentials permission to log into the S3 Console.
For more information on assigning roles, see the Administrator Help.