title: GCS 'Storage Object Viewer' role cannot view objects
body: <p>I am trying to give a user read access to a Google Cloud Storage bucket. The user has the &quot;Storage Object Viewer&quot; role</p>
  <p><a href="https://i.stack.imgur.com/i3Ixv.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/i3Ixv.png" alt="Role: Storage Object Viewer" /></a></p>
  <p>but the user cannot see the items in the bucket:</p>
  <p><a href="https://i.stack.imgur.com/L3jmg.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/L3jmg.png" alt="Error message" /></a></p>
  <p>The project ID is valid and <del>according to the docs the &quot;Storage Object Viewer&quot; role includes the storage.buckets.list permission</del> (EDIT: This is incorrect, see <a href="https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles" rel="nofollow noreferrer">https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles</a>).</p>
  <p>The user can access the bucket if I give him the &quot;Storage Object Admin&quot; role, but then he also has write access. How do I just grant read access?</p>