Non-admin users can now perform AI Object Storage actions in the Cloud Console when granted specific permissions via organization access policies.Documentation Index
Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
Use this file to discover all available pages before exploring further.
Overview
Previously, only users with theObject Storage Admin IAM role (or legacy admin group membership) could access AI Object Storage features in the Cloud Console. With this update, you can grant non-admin users specific AI Object Storage permissions through organization access policies, enabling them to perform those actions in the Console.
This enables organizations to follow the principle of least privilege, granting users only the specific Object Storage capabilities they need, without requiring full admin access.
What’s new
Granular Console permissions
Non-admin users can now perform specific AI Object Storage actions in the Cloud Console when granted the appropriatecwobject: permissions. For example:
| To allow a user to… | Grant these permissions |
|---|---|
| View buckets | cwobject:ListBucketInfo |
| Create buckets | s3:CreateBucket, cwobject:CreateAccessKey |
| Create access keys | cwobject:CreateAccessKey, cwobject:CreateAccessKeySAML |
| Manage organization policies | cwobject:EnsureAccessPolicy, cwobject:ListAccessPolicy |
Additional resources
- Console Permissions Reference
- Manage organization access policies
- IAM Access Policies (Nov 20, 2025 release)