Systems and methods are disclosed for object-based commands with access control identifiers. In an embodiment, an apparatus may comprise a data storage device configured to store data as objects, each object including a tracking indicator to identify the object and a data field with a variable size to store user data. The data storage device may be further configured to receive a command including an operation directed to an object and an access control identifier used to determine whether to perform the operation. Commands may be directed towards put, get, or delete operations, among others.