Learn how to create an IAM role.

1. In the Google Cloud console, select Roles.
2. In the Roles page, select your organization or project from the drop-down list at the top of the page.
3. Select the More actions icon at the top of the page.
4. Select CREATE ROLE.
5. In the Create Role page, provide these details:
   1. Title: Enter the role name.
   2. Description: Enter the role description.
   3. Select + ADD PERMISSIONS.
   4. In the Add permissions window, enter the permissions.
      Enter:

      • storage.buckets.get

      • storage.objects.get

      • storage.objects.list

      Search for the permission using the Enter property name or value field. The assigned permissions are displayed in the assigned permissions section.

6. Select CREATE.