Collection of resources to manage IAM policy for a Google storage bucket.
---
# IAM policy for Google storage bucket
Two different resources help you manage your IAM policy for storage bucket. Each of these resources serves a different use case:
*`google_storage_bucket_iam_binding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the storage bucket are preserved.
*`google_storage_bucket_iam_member`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the storage bucket are preserved.
~> **Note:**`google_storage_bucket_iam_binding` resources **can be** used in conjunction with `google_storage_bucket_iam_member` resources **only if** they do not grant privilege to the same role.