// IAM group members file
	iamGroupMembersFile = "members.json"

	// IAM format file
	iamFormatFile = "format.json"

	iamFormatVersion1 = 1

	minServiceAccountExpiry time.Duration = 15 * time.Minute
	maxServiceAccountExpiry time.Duration = 365 * 24 * time.Hour
)

var errInvalidSvcAcctExpiration = errors.New("invalid service account expiration")

type iamFormat struct {
	Version int `json:"version"`
}

				set:                true,
				ObjectSizeLessThan: 100 * humanize.MiByte,
			},
			Expiration: Expiration{
				set:  true,
				Days: 1,
			},
		},
		{
			ID:     "rule-with-sz-gt",
			Status: "Enabled",
			Filter: Filter{
				set:                   true,
				ObjectSizeGreaterThan: 1 * humanize.MiByte,
			},
			Expiration: Expiration{
				set:  true,
				Days: 1,

	ctx := r.Context()

	objectAPI, creds := validateAdminReq(ctx, w, r, policy.StartBatchJobAction)
	if objectAPI == nil {
		return
	}

	buf, err := io.ReadAll(ioutil.HardLimitReader(r.Body, humanize.MiByte*4))
	if err != nil {
		writeErrorResponseJSON(ctx, w, toAPIError(ctx, err), r.URL)
		return
	}

	user := creds.AccessKey
	if creds.ParentUser != "" {
		user = creds.ParentUser
	}