App.CVAT.AI with GCP Bucket - Minimum Permissions

[JoshJonesLynker]

Hello! I need a sanity check, if possible.
I have a client that wants to use app.cvat.ai (great), and uses GCP (also fine). However, they have a single GCP project with a number of buckets, and they limit all service account permissions to resource level only (no project roles, etc.).
Can anyone confirm for me the minimum level of permissions needed on the bucket for this to work? I was able to attach with only Storage Object Viewer and Storage Bucket Viewer, but am looking for anyone who has actually worked in this scenario. Thanks!

[Lemeri123]

Hey! In that setup, Storage Object Viewer is usually enough for CVAT to read files from the bucket. If you need upload/write access (like saving annotations back), you’d also need Storage Object Creator or Storage Object Admin. If it’s just reading, what you have should work fine. 👍