What is the recommended way to configure access to GCS bucket?

I want to restrict access to my GCS bucket for only few people. I was planning to use Authorization Extension’s group and add users to a group and setup access for the group. It looks like Authorization Extension will be deprecated and it is not the recommended approach. The new core extension doesn’t seem to have groups.

What is the recommended way to setup access for GCS buckets?