> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.zata.prathamchopde.site/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.zata.prathamchopde.site/_mcp/server.

# Policies

**Bucket Policies** shows the access your account owner gave you, bucket by bucket. From here you can also ask for more permissions. The page has three tabs:

| Tab           | What it shows                                                                                         |
| ------------- | ----------------------------------------------------------------------------------------------------- |
| **Allocated** | Your current policies, with bucket, preset, scope (**Entire bucket** or a folder), effect and status. |
| **Requested** | Requests you sent that are still waiting. You can **Cancel** one.                                     |
| **Rejected**  | Requests your account owner turned down, with any remarks. You can remove them from the list.         |

![The sub-user Policies page with Allocated, Requested and Rejected tabs, filters and two policy cards](/_fern-img/b117d59569c33983c3e8c385c99bdf90248a4b5686111370ae0827152a5a0ce9.webp)

Select a policy to see its details: effect, scope, folders and the full list of S3 actions it allows.

![A policy's details panel with effect, scope, resources, a list of allowed S3 actions and a Request Policy button](/_fern-img/e33843d03be336b81aae8c4a3951ccd4a874cf5da312662cd8bed0aa9f5f7c43.webp)

## Ask for more permissions

#### Open the policy

On the **Allocated** tab, select the policy for the bucket, then select **Request Policy**.

#### Choose the permissions

Under **Permissions**, tick the actions you need. Actions you already have are marked **Allocated**, and requests still waiting are marked **Pending**. **Sensitive** marks actions that can delete data, such as **Delete files**.

![The Request Policy dialog listing file and bucket permissions with Allocated and Sensitive badges and a Request button](/_fern-img/7467ea1dba5f25ea04d51919f55a2ca03e58f968ccf7c56c492927359525993f.webp)

#### Send the request

Select **Request**. The request appears on the **Requested** tab.

Your account owner approves or rejects it. You get a notification and an email with the result. Approved actions are added to your policy straight away; rejected ones move to the **Rejected** tab.

You can only request more actions on a bucket you already have a policy for. For a new bucket, ask your account owner directly.