# Configuring an Object ACL

#### Prerequisites

You are the object owner or you have the permission to write the object ACL.

An object owner is the account that uploads the object, but may not be the owner of the bucket that stores the object. For example, account B is granted the permission to access a bucket of account A, and account B uploads a file to the bucket. In that case, account B, instead of the bucket owner account A, is the owner of the object. By default, account A is not allowed to access this object and cannot read or modify the object ACL.

#### Procedure

1. In the bucket list, click the bucket to be operated. The Overview page of the bucket is displayed.
2. In the navigation pane, click Objects.
3. Click the object to be operated.
4. On the Object ACL tab, click Edit to set ACL permissions of the Owner, Registered User, and Anonymous User for the target object.

   If the object is encrypted, the ACL permission cannot be configured for registered users and anonymous users.

5. Click Add to set the ACL permissions of a specific account. For details, see Figure 1.

   Enter an account ID or account name and set ACL permissions for the account. You can obtain the account ID or account name on the My Credentials page. The account ID and account name correspond to the Domain ID and Domain Name respectively on the My Credentials page.

   Figure 1 Adding ACL permissions for objects
6. Click Save.

Parent topic: Permission Control