Google’s gsutil is a great tool for pushing, retrieving and setting permissions on objects uploaded to Google Storage. I was reviewing the documentation on the Sharing and Collaboration page, specifically the Authenticated Browser Download section and realized there were a couple of small mistakes, err typos. I wanted to give someone read privileges to an object via their email address. The correct format is posted in this Paste.

The EmailAddress tag needs to be closed and the Permission tags need to be moved outside of the Scope tag. With all of this said I later came across Access Control page which is documented correctly. Go figure.