| roles/firebasehosting.admin |
Full read/write access to Firebase Hosting resources. |
Firebase Hosting Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebasedatabase.admin |
Full read/write access to Firebase Realtime Database resources. |
Firebase Realtime Database Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.growthAdmin |
Full access to Firebase Grow products and Analytics. |
Firebase Grow Admin |
['apikeys.keys.get', 'apikeys.keys.list', 'clientauthconfig.clients.get', 'clientauthconfig.clients.list', 'cloudconfig.configs.get', 'cloudconfig.configs.update', 'cloudmessaging.messages.create', 'cloudnotifications.activities.list', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.create', 'firebaseabt.experiments.delete', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.experiments.update', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.destinations.update', 'firebasedynamiclinks.domains.create', 'firebasedynamiclinks.domains.delete', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.domains.update', 'firebasedynamiclinks.links.create', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.links.update', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.list', 'firebaseinappmessaging.campaigns.create', 'firebaseinappmessaging.campaigns.delete', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebaseinappmessaging.campaigns.update', 'firebasemessagingcampaigns.campaigns.create', 'firebasemessagingcampaigns.campaigns.delete', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasemessagingcampaigns.campaigns.start', 'firebasemessagingcampaigns.campaigns.stop', 'firebasemessagingcampaigns.campaigns.update', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/firebaseextensions.developer |
View, create, and delete Firebase Extensions Instances and Extensions Versions, and update Extensions Instances |
Firebase Extensions Developer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebasemessagingcampaigns.admin |
Full management of Firebase Messaging Campaigns. |
Firebase Messaging Campaigns Admin |
['firebasemessagingcampaigns.campaigns.create', 'firebasemessagingcampaigns.campaigns.delete', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasemessagingcampaigns.campaigns.start', 'firebasemessagingcampaigns.campaigns.stop', 'firebasemessagingcampaigns.campaigns.update'] |
|
BETA |
| roles/firebasestorage.viewer |
Read-only access for Cloud Storage for Firebase. |
Cloud Storage for Firebase Viewer |
['firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.defaultBucket.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebaseauth.viewer |
Read-only access to Firebase Authentication resources. |
Firebase Authentication Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseauth.configs.get', 'firebaseauth.users.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebasedatabase.viewer |
Read-only access to Firebase Realtime Database resources. |
Firebase Realtime Database Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaseinappmessaging.admin |
Full read/write access to Firebase In-App Messaging resources. |
Firebase In-App Messaging Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseinappmessaging.campaigns.create', 'firebaseinappmessaging.campaigns.delete', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebaseinappmessaging.campaigns.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebasedataconnect.admin |
Full access to Firebase Data Connect API resources, including data. |
Firebase Data Connect API Admin |
['firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebasehosting.viewer |
Read-only access to Firebase Hosting resources. |
Firebase Hosting Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.sdkProvisioningServiceAgent |
Access to provision apps with the Admin SDK. |
Firebase SDK Provisioning Service Agent |
['apikeys.keys.list', 'clientauthconfig.clients.list', 'cloudmessaging.messages.create', 'firebase.clients.create', 'servicemanagement.services.bind', 'serviceusage.services.enable', 'serviceusage.services.get'] |
|
GA |
| roles/firebaseapphosting.serviceAgent |
Gives Firebase App Hosting access to resource for Building & Deploying Backends. |
Firebase App Hosting Service Agent |
['artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.repositories.create', 'artifactregistry.repositories.delete', 'artifactregistry.repositories.deleteArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.update', 'cloudbuild.builds.create', 'cloudbuild.builds.get', 'cloudbuild.builds.update', 'cloudbuild.connections.get', 'cloudbuild.operations.get', 'cloudbuild.repositories.accessReadToken', 'cloudbuild.repositories.accessReadWriteToken', 'cloudbuild.repositories.get', 'developerconnect.connections.get', 'developerconnect.gitRepositoryLinks.fetchReadToken', 'developerconnect.gitRepositoryLinks.fetchReadWriteToken', 'developerconnect.gitRepositoryLinks.get', 'iam.serviceAccounts.actAs', 'run.operations.delete', 'run.operations.get', 'run.revisions.delete', 'run.revisions.get', 'run.routes.get', 'run.routes.invoke', 'run.services.create', 'run.services.delete', 'run.services.get', 'run.services.update', 'serviceusage.services.use'] |
|
GA |
| roles/firebaseextensions.viewer |
Viewer of Firebase Extensions Instances |
Firebase Extensions Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebase.sdkAdminServiceAgent |
Read and write access to Firebase products available in the Admin SDK |
Firebase Admin SDK Administrator Service Agent |
['appengine.applications.get', 'cloudconfig.configs.get', 'cloudconfig.configs.update', 'cloudmessaging.messages.create', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.list', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.statistics.get', 'datastore.statistics.list', 'firebase.clients.create', 'firebase.clients.delete', 'firebase.clients.get', 'firebase.clients.list', 'firebase.clients.undelete', 'firebase.clients.update', 'firebase.projects.get', 'firebase.projects.update', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'identitytoolkit.tenants.create', 'identitytoolkit.tenants.delete', 'identitytoolkit.tenants.get', 'identitytoolkit.tenants.getIamPolicy', 'identitytoolkit.tenants.list', 'identitytoolkit.tenants.setIamPolicy', 'identitytoolkit.tenants.update', 'orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'resourcemanager.projects.update', 'storage.buckets.create', 'storage.buckets.delete', 'storage.buckets.get', 'storage.buckets.list', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.list', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update'] |
|
GA |
| roles/firebaseappcheck.tokenVerifier |
Access to token verification capabilities for Firebase App Check. |
Firebase App Check Token Verifier |
['firebaseappcheck.appCheckTokens.verify'] |
|
GA |
| roles/firebaseextensionspublisher.extensionsAdmin |
Fully manage Firebase Extensions |
Firebase Extensions Publisher - Extensions Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseextensionspublisher.extensions.create', 'firebaseextensionspublisher.extensions.delete', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebase.growthViewer |
Read access to Firebase Grow products and Analytics. |
Firebase Grow Viewer |
['apikeys.keys.get', 'apikeys.keys.list', 'cloudconfig.configs.get', 'cloudnotifications.activities.list', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.list', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/firebaseabt.admin |
Full read/write access to Firebase A/B Testing resources. |
Firebase A/B Testing Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.create', 'firebaseabt.experiments.delete', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.experiments.update', 'firebaseabt.projectmetadata.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebase.developViewer |
Read access to Firebase Develop products and Analytics. |
Firebase Develop Viewer |
['apikeys.keys.get', 'apikeys.keys.list', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotations.list', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.datasets.get', 'automl.datasets.list', 'automl.examples.get', 'automl.examples.list', 'automl.files.list', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.list', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.get', 'automl.models.list', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.list', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudnotifications.activities.list', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.list', 'datastore.entities.get', 'datastore.entities.list', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.statistics.get', 'datastore.statistics.list', 'errorreporting.groups.list', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleChannelConfigs.get', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.use', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.services.get', 'firebaseauth.configs.get', 'firebaseauth.users.get', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'firebaseextensions.configs.list', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.defaultBucket.get', 'logging.logEntries.list', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'remotebuildexecution.blobs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.get', 'run.executions.list', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.locations.list', 'run.operations.get', 'run.operations.list', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.list', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.tasks.get', 'run.tasks.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.list', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list'] |
|
GA |
| roles/firebasecloudmessaging.admin |
Full read/write access to Firebase Cloud Messaging API resources. |
Firebase Cloud Messaging API Admin |
['cloudmessaging.messages.create', 'fcmdata.deliverydata.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebaseml.viewer |
Read-only access to Firebase ML Kit resources. |
Firebase ML Kit Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebaseperformance.admin |
Full access to firebaseperformance resources. |
Firebase Performance Reporting Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseperformance.config.update', 'firebaseperformance.data.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaseml.serviceAgent |
Access to Cloud ML and AI resources used by Firebase ML |
Firebase Machine Learning Service Agent |
['aiplatform.endpoints.predict'] |
|
GA |
| roles/firebasedataconnect.dataViewer |
Readonly access to data sources. |
Firebase Data Connect API Data Viewer |
['firebasedataconnect.services.executeGraphqlRead'] |
|
BETA |
| roles/firebaseappcheck.admin |
Full management of Firebase App Check. |
Firebase App Check Admin |
['firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update'] |
|
GA |
| roles/firebasenotifications.admin |
Full read/write access to Firebase Cloud Messaging resources. |
Firebase Cloud Messaging Admin |
['fcmdata.deliverydata.list', 'firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaserules.system |
Read/write/list access for Datastore entities and Cloud Storage objects, as well as get/list/publish access for PubSub topics. |
Firebase Rules System |
['datastore.databases.get', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'pubsub.topics.get', 'pubsub.topics.list', 'pubsub.topics.publish', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.list', 'storage.objects.update'] |
|
GA |
| roles/firebaseextensionspublisher.extensionsViewer |
View Firebase Extensions |
Firebase Extensions Publisher - Extensions Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebaseabt.viewer |
Read-only access to Firebase A/B Testing resources. |
Firebase A/B Testing Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.projectmetadata.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebasedataconnect.dataAdmin |
Full access to data sources. |
Firebase Data Connect API Data Admin |
['firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead'] |
|
BETA |
| roles/firebasecrashlytics.admin |
Full read/write access to Firebase Crashlytics resources. |
Firebase Crashlytics Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.config.update', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.issues.update', 'firebasecrashlytics.sessions.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaseml.admin |
Full read/write access to Firebase ML Kit resources. |
Firebase ML Kit Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebaseappdistro.admin |
Full read/write access to Firebase App Distribution resources. |
Firebase App Distribution Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebasedataconnect.serviceAgent |
Gives Firebase Data Connect access to administer Cloud SQL instances. |
Firebase Data Connect Service Agent |
['cloudsql.databases.create', 'cloudsql.databases.get', 'cloudsql.instances.connect', 'cloudsql.instances.get', 'cloudsql.instances.login', 'cloudsql.users.create', 'cloudsql.users.get'] |
|
GA |
| roles/firebasedatabase.serviceAgent |
Access to publish triggers |
Firebase Realtime Database Service Agent |
['pubsub.topics.publish', 'serviceusage.services.use'] |
|
GA |
| roles/firebasedynamiclinks.viewer |
Read-only access to Firebase Dynamic Links resources. |
Firebase Dynamic Links Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.stats.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaserules.firestoreServiceAgent |
Grants Firebase Security Rules access to Firestore for providing cross-service Rules. |
Firebase Rules Firestore Service Agent |
['datastore.entities.get'] |
|
GA |
| roles/firebasemessagingcampaigns.viewer |
Read-only access for Firebase Messaging Campaigns. |
Firebase Messaging Campaigns Viewer |
['firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list'] |
|
BETA |
| roles/firebaseauth.admin |
Full read/write access to Firebase Authentication resources. |
Firebase Authentication Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getHashConfig', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.analyticsAdmin |
Full access to Google Analytics for Firebase. |
Firebase Analytics Admin |
['cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseextensions.configs.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaseperformance.viewer |
Read-only access to firebaseperformance resources. |
Firebase Performance Reporting Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseperformance.data.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebasenotifications.viewer |
Read-only access to Firebase Cloud Messaging resources. |
Firebase Cloud Messaging Viewer |
['fcmdata.deliverydata.list', 'firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebaserules.viewer |
Read-only access on all resources with the ability to test Rulesets. |
Firebase Rules Viewer |
['firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.appDistributionSdkServiceAgent |
Read and write access to Firebase App Distribution with the Admin SDK |
Firebase App Distribution Admin SDK Service Agent |
['firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update'] |
|
GA |
| roles/firebasecrash.symbolMappingsAdmin |
Full read/write access to symbol mapping file resources for Firebase Crash Reporting. |
Firebase Crash Symbol Uploader |
['firebase.clients.get', 'firebase.clients.list', 'resourcemanager.projects.get'] |
|
GA |
| roles/firebaserules.admin |
Full management of Firebase Rules. |
Firebase Rules Admin |
['firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.getExecutable', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebaserules.rulesets.test', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebasedataconnect.viewer |
Readonly access to Firebase Data Connect API resources. Role does not grant access to data. |
Firebase Data Connect API Viewer |
['firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebase.qualityAdmin |
Full access to Firebase Quality products and Analytics. |
Firebase Quality Admin |
['apikeys.keys.get', 'apikeys.keys.list', 'cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update', 'firebasecrash.issues.update', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.config.update', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.issues.update', 'firebasecrashlytics.sessions.get', 'firebaseextensions.configs.list', 'firebaseperformance.config.update', 'firebaseperformance.data.get', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/firebaseinappmessaging.viewer |
Read-only access to Firebase In-App Messaging resources. |
Firebase In-App Messaging Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |
| roles/firebasedynamiclinks.admin |
Full read/write access to Firebase Dynamic Links resources. |
Firebase Dynamic Links Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.destinations.update', 'firebasedynamiclinks.domains.create', 'firebasedynamiclinks.domains.delete', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.domains.update', 'firebasedynamiclinks.links.create', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.links.update', 'firebasedynamiclinks.stats.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.developAdmin |
Full access to Firebase Develop products and Analytics. |
Firebase Develop Admin |
['apikeys.keys.get', 'apikeys.keys.getKeyString', 'apikeys.keys.list', 'apikeys.keys.lookup', 'appengine.applications.get', 'automl.annotationSpecs.create', 'automl.annotationSpecs.delete', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotationSpecs.update', 'automl.annotations.approve', 'automl.annotations.create', 'automl.annotations.list', 'automl.annotations.manipulate', 'automl.annotations.reject', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.columnSpecs.update', 'automl.datasets.create', 'automl.datasets.delete', 'automl.datasets.export', 'automl.datasets.get', 'automl.datasets.getIamPolicy', 'automl.datasets.import', 'automl.datasets.list', 'automl.datasets.setIamPolicy', 'automl.datasets.update', 'automl.examples.delete', 'automl.examples.get', 'automl.examples.list', 'automl.examples.update', 'automl.files.delete', 'automl.files.list', 'automl.humanAnnotationTasks.create', 'automl.humanAnnotationTasks.delete', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.getIamPolicy', 'automl.locations.list', 'automl.locations.setIamPolicy', 'automl.modelEvaluations.create', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.create', 'automl.models.delete', 'automl.models.deploy', 'automl.models.export', 'automl.models.get', 'automl.models.getIamPolicy', 'automl.models.list', 'automl.models.predict', 'automl.models.setIamPolicy', 'automl.models.undeploy', 'automl.operations.cancel', 'automl.operations.delete', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'automl.tableSpecs.update', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'clientauthconfig.brands.update', 'clientauthconfig.clients.get', 'clientauthconfig.clients.list', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudfunctions.functions.call', 'cloudfunctions.functions.create', 'cloudfunctions.functions.delete', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.invoke', 'cloudfunctions.functions.list', 'cloudfunctions.functions.setIamPolicy', 'cloudfunctions.functions.sourceCodeGet', 'cloudfunctions.functions.sourceCodeSet', 'cloudfunctions.functions.update', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudnotifications.activities.list', 'datastore.backupSchedules.create', 'datastore.backupSchedules.delete', 'datastore.backupSchedules.get', 'datastore.backupSchedules.list', 'datastore.backupSchedules.update', 'datastore.backups.delete', 'datastore.backups.get', 'datastore.backups.list', 'datastore.backups.restoreDatabase', 'datastore.databases.bulkDelete', 'datastore.databases.create', 'datastore.databases.createTagBinding', 'datastore.databases.delete', 'datastore.databases.deleteTagBinding', 'datastore.databases.export', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.import', 'datastore.databases.list', 'datastore.databases.listEffectiveTags', 'datastore.databases.listTagBindings', 'datastore.databases.update', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'datastore.indexes.create', 'datastore.indexes.delete', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.indexes.update', 'datastore.keyVisualizerScans.get', 'datastore.keyVisualizerScans.list', 'datastore.locations.get', 'datastore.locations.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.operations.cancel', 'datastore.operations.delete', 'datastore.operations.get', 'datastore.operations.list', 'datastore.statistics.get', 'datastore.statistics.list', 'errorreporting.groups.list', 'eventarc.channelConnections.create', 'eventarc.channelConnections.delete', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channelConnections.publish', 'eventarc.channelConnections.setIamPolicy', 'eventarc.channels.attach', 'eventarc.channels.create', 'eventarc.channels.delete', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.channels.publish', 'eventarc.channels.setIamPolicy', 'eventarc.channels.undelete', 'eventarc.channels.update', 'eventarc.enrollments.create', 'eventarc.enrollments.delete', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.enrollments.setIamPolicy', 'eventarc.enrollments.update', 'eventarc.events.receiveAuditLogWritten', 'eventarc.events.receiveEvent', 'eventarc.googleApiSources.create', 'eventarc.googleApiSources.delete', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleApiSources.setIamPolicy', 'eventarc.googleApiSources.update', 'eventarc.googleChannelConfigs.get', 'eventarc.googleChannelConfigs.update', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.create', 'eventarc.messageBuses.delete', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.publish', 'eventarc.messageBuses.setIamPolicy', 'eventarc.messageBuses.update', 'eventarc.messageBuses.use', 'eventarc.operations.cancel', 'eventarc.operations.delete', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.create', 'eventarc.pipelines.delete', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.pipelines.setIamPolicy', 'eventarc.pipelines.update', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.create', 'eventarc.triggers.delete', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'eventarc.triggers.setIamPolicy', 'eventarc.triggers.undelete', 'eventarc.triggers.update', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getHashConfig', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'firebaseextensions.configs.list', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.getExecutable', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebaserules.rulesets.test', 'firebasestorage.buckets.addFirebase', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.buckets.removeFirebase', 'firebasestorage.defaultBucket.create', 'firebasestorage.defaultBucket.delete', 'firebasestorage.defaultBucket.get', 'logging.logEntries.list', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'orgpolicy.policy.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceInsights.update', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.cloudFunctionsPerformanceRecommendations.update', 'recommender.iamPolicyInsights.get', 'recommender.iamPolicyInsights.list', 'recommender.iamPolicyInsights.update', 'recommender.iamPolicyRecommendations.get', 'recommender.iamPolicyRecommendations.list', 'recommender.iamPolicyRecommendations.update', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostInsights.update', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceCostRecommendations.update', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityInsights.update', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServiceIdentityRecommendations.update', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceInsights.update', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServicePerformanceRecommendations.update', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityInsights.update', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'recommender.runServiceSecurityRecommendations.update', 'recommender.storageBucketSoftDeleteInsights.get', 'recommender.storageBucketSoftDeleteInsights.list', 'recommender.storageBucketSoftDeleteInsights.update', 'recommender.storageBucketSoftDeleteRecommendations.get', 'recommender.storageBucketSoftDeleteRecommendations.list', 'recommender.storageBucketSoftDeleteRecommendations.update', 'remotebuildexecution.blobs.get', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.cancel', 'run.executions.delete', 'run.executions.get', 'run.executions.list', 'run.jobs.create', 'run.jobs.createTagBinding', 'run.jobs.delete', 'run.jobs.deleteTagBinding', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.jobs.run', 'run.jobs.runWithOverrides', 'run.jobs.setIamPolicy', 'run.jobs.update', 'run.locations.list', 'run.operations.delete', 'run.operations.get', 'run.operations.list', 'run.revisions.delete', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.invoke', 'run.routes.list', 'run.services.create', 'run.services.createTagBinding', 'run.services.delete', 'run.services.deleteTagBinding', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.services.setIamPolicy', 'run.services.update', 'run.tasks.get', 'run.tasks.list', 'runtimeconfig.configs.create', 'runtimeconfig.configs.delete', 'runtimeconfig.configs.get', 'runtimeconfig.configs.list', 'runtimeconfig.configs.update', 'runtimeconfig.operations.get', 'runtimeconfig.operations.list', 'runtimeconfig.variables.create', 'runtimeconfig.variables.delete', 'runtimeconfig.variables.get', 'runtimeconfig.variables.list', 'runtimeconfig.variables.update', 'runtimeconfig.variables.watch', 'runtimeconfig.waiters.create', 'runtimeconfig.waiters.delete', 'runtimeconfig.waiters.get', 'runtimeconfig.waiters.list', 'runtimeconfig.waiters.update', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.anywhereCaches.create', 'storage.anywhereCaches.disable', 'storage.anywhereCaches.get', 'storage.anywhereCaches.list', 'storage.anywhereCaches.pause', 'storage.anywhereCaches.resume', 'storage.anywhereCaches.update', 'storage.bucketOperations.cancel', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.createTagBinding', 'storage.buckets.delete', 'storage.buckets.deleteTagBinding', 'storage.buckets.enableObjectRetention', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.getObjectInsights', 'storage.buckets.list', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings', 'storage.buckets.restore', 'storage.buckets.setIamPolicy', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.managementHubs.get', 'storage.managementHubs.update', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update'] |
|
GA |
| roles/firebasecrashlytics.viewer |
Read-only access to Firebase Crashlytics resources. |
Firebase Crashlytics Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.sessions.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.admin |
Full access to Firebase products. |
Firebase Admin |
['apikeys.keys.get', 'apikeys.keys.getKeyString', 'apikeys.keys.list', 'apikeys.keys.lookup', 'appengine.applications.get', 'automl.annotationSpecs.create', 'automl.annotationSpecs.delete', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotationSpecs.update', 'automl.annotations.approve', 'automl.annotations.create', 'automl.annotations.list', 'automl.annotations.manipulate', 'automl.annotations.reject', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.columnSpecs.update', 'automl.datasets.create', 'automl.datasets.delete', 'automl.datasets.export', 'automl.datasets.get', 'automl.datasets.getIamPolicy', 'automl.datasets.import', 'automl.datasets.list', 'automl.datasets.setIamPolicy', 'automl.datasets.update', 'automl.examples.delete', 'automl.examples.get', 'automl.examples.list', 'automl.examples.update', 'automl.files.delete', 'automl.files.list', 'automl.humanAnnotationTasks.create', 'automl.humanAnnotationTasks.delete', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.getIamPolicy', 'automl.locations.list', 'automl.locations.setIamPolicy', 'automl.modelEvaluations.create', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.create', 'automl.models.delete', 'automl.models.deploy', 'automl.models.export', 'automl.models.get', 'automl.models.getIamPolicy', 'automl.models.list', 'automl.models.predict', 'automl.models.setIamPolicy', 'automl.models.undeploy', 'automl.operations.cancel', 'automl.operations.delete', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'automl.tableSpecs.update', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'clientauthconfig.brands.update', 'clientauthconfig.clients.create', 'clientauthconfig.clients.delete', 'clientauthconfig.clients.get', 'clientauthconfig.clients.list', 'clientauthconfig.clients.update', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudconfig.configs.get', 'cloudconfig.configs.update', 'cloudfunctions.functions.call', 'cloudfunctions.functions.create', 'cloudfunctions.functions.delete', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.invoke', 'cloudfunctions.functions.list', 'cloudfunctions.functions.setIamPolicy', 'cloudfunctions.functions.sourceCodeGet', 'cloudfunctions.functions.sourceCodeSet', 'cloudfunctions.functions.update', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudmessaging.messages.create', 'cloudnotifications.activities.list', 'cloudtestservice.environmentcatalog.get', 'cloudtestservice.matrices.create', 'cloudtestservice.matrices.get', 'cloudtestservice.matrices.update', 'cloudtoolresults.executions.create', 'cloudtoolresults.executions.get', 'cloudtoolresults.executions.list', 'cloudtoolresults.executions.update', 'cloudtoolresults.histories.create', 'cloudtoolresults.histories.get', 'cloudtoolresults.histories.list', 'cloudtoolresults.settings.create', 'cloudtoolresults.settings.get', 'cloudtoolresults.settings.update', 'cloudtoolresults.steps.create', 'cloudtoolresults.steps.get', 'cloudtoolresults.steps.list', 'cloudtoolresults.steps.update', 'datastore.backupSchedules.create', 'datastore.backupSchedules.delete', 'datastore.backupSchedules.get', 'datastore.backupSchedules.list', 'datastore.backupSchedules.update', 'datastore.backups.delete', 'datastore.backups.get', 'datastore.backups.list', 'datastore.backups.restoreDatabase', 'datastore.databases.bulkDelete', 'datastore.databases.create', 'datastore.databases.createTagBinding', 'datastore.databases.delete', 'datastore.databases.deleteTagBinding', 'datastore.databases.export', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.import', 'datastore.databases.list', 'datastore.databases.listEffectiveTags', 'datastore.databases.listTagBindings', 'datastore.databases.update', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'datastore.indexes.create', 'datastore.indexes.delete', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.indexes.update', 'datastore.keyVisualizerScans.get', 'datastore.keyVisualizerScans.list', 'datastore.locations.get', 'datastore.locations.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.operations.cancel', 'datastore.operations.delete', 'datastore.operations.get', 'datastore.operations.list', 'datastore.statistics.get', 'datastore.statistics.list', 'errorreporting.groups.list', 'eventarc.channelConnections.create', 'eventarc.channelConnections.delete', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channelConnections.publish', 'eventarc.channelConnections.setIamPolicy', 'eventarc.channels.attach', 'eventarc.channels.create', 'eventarc.channels.delete', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.channels.publish', 'eventarc.channels.setIamPolicy', 'eventarc.channels.undelete', 'eventarc.channels.update', 'eventarc.enrollments.create', 'eventarc.enrollments.delete', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.enrollments.setIamPolicy', 'eventarc.enrollments.update', 'eventarc.events.receiveAuditLogWritten', 'eventarc.events.receiveEvent', 'eventarc.googleApiSources.create', 'eventarc.googleApiSources.delete', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleApiSources.setIamPolicy', 'eventarc.googleApiSources.update', 'eventarc.googleChannelConfigs.get', 'eventarc.googleChannelConfigs.update', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.create', 'eventarc.messageBuses.delete', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.publish', 'eventarc.messageBuses.setIamPolicy', 'eventarc.messageBuses.update', 'eventarc.messageBuses.use', 'eventarc.operations.cancel', 'eventarc.operations.delete', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.create', 'eventarc.pipelines.delete', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.pipelines.setIamPolicy', 'eventarc.pipelines.update', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.create', 'eventarc.triggers.delete', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'eventarc.triggers.setIamPolicy', 'eventarc.triggers.undelete', 'eventarc.triggers.update', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.billingPlans.update', 'firebase.clients.create', 'firebase.clients.delete', 'firebase.clients.get', 'firebase.clients.list', 'firebase.clients.undelete', 'firebase.clients.update', 'firebase.links.create', 'firebase.links.delete', 'firebase.links.list', 'firebase.links.update', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.playLinks.update', 'firebase.projects.delete', 'firebase.projects.get', 'firebase.projects.update', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.create', 'firebaseabt.experiments.delete', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.experiments.update', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update', 'firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getHashConfig', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'firebasecrash.issues.update', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.config.update', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.issues.update', 'firebasecrashlytics.sessions.get', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.destinations.update', 'firebasedynamiclinks.domains.create', 'firebasedynamiclinks.domains.delete', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.domains.update', 'firebasedynamiclinks.links.create', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.links.update', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.create', 'firebaseextensions.configs.delete', 'firebaseextensions.configs.list', 'firebaseextensions.configs.update', 'firebaseextensionspublisher.extensions.create', 'firebaseextensionspublisher.extensions.delete', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaseinappmessaging.campaigns.create', 'firebaseinappmessaging.campaigns.delete', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebaseinappmessaging.campaigns.update', 'firebasemessagingcampaigns.campaigns.create', 'firebasemessagingcampaigns.campaigns.delete', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasemessagingcampaigns.campaigns.start', 'firebasemessagingcampaigns.campaigns.stop', 'firebasemessagingcampaigns.campaigns.update', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'firebaseperformance.config.update', 'firebaseperformance.data.get', 'firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.getExecutable', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebaserules.rulesets.test', 'firebasestorage.buckets.addFirebase', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.buckets.removeFirebase', 'firebasestorage.defaultBucket.create', 'firebasestorage.defaultBucket.delete', 'firebasestorage.defaultBucket.get', 'logging.logEntries.list', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'orgpolicy.policy.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceInsights.update', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.cloudFunctionsPerformanceRecommendations.update', 'recommender.iamPolicyInsights.get', 'recommender.iamPolicyInsights.list', 'recommender.iamPolicyInsights.update', 'recommender.iamPolicyRecommendations.get', 'recommender.iamPolicyRecommendations.list', 'recommender.iamPolicyRecommendations.update', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostInsights.update', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceCostRecommendations.update', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityInsights.update', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServiceIdentityRecommendations.update', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceInsights.update', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServicePerformanceRecommendations.update', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityInsights.update', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'recommender.runServiceSecurityRecommendations.update', 'recommender.storageBucketSoftDeleteInsights.get', 'recommender.storageBucketSoftDeleteInsights.list', 'recommender.storageBucketSoftDeleteInsights.update', 'recommender.storageBucketSoftDeleteRecommendations.get', 'recommender.storageBucketSoftDeleteRecommendations.list', 'recommender.storageBucketSoftDeleteRecommendations.update', 'remotebuildexecution.blobs.get', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.cancel', 'run.executions.delete', 'run.executions.get', 'run.executions.list', 'run.jobs.create', 'run.jobs.createTagBinding', 'run.jobs.delete', 'run.jobs.deleteTagBinding', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.jobs.run', 'run.jobs.runWithOverrides', 'run.jobs.setIamPolicy', 'run.jobs.update', 'run.locations.list', 'run.operations.delete', 'run.operations.get', 'run.operations.list', 'run.revisions.delete', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.invoke', 'run.routes.list', 'run.services.create', 'run.services.createTagBinding', 'run.services.delete', 'run.services.deleteTagBinding', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.services.setIamPolicy', 'run.services.update', 'run.tasks.get', 'run.tasks.list', 'runtimeconfig.configs.create', 'runtimeconfig.configs.delete', 'runtimeconfig.configs.get', 'runtimeconfig.configs.list', 'runtimeconfig.configs.update', 'runtimeconfig.operations.get', 'runtimeconfig.operations.list', 'runtimeconfig.variables.create', 'runtimeconfig.variables.delete', 'runtimeconfig.variables.get', 'runtimeconfig.variables.list', 'runtimeconfig.variables.update', 'runtimeconfig.variables.watch', 'runtimeconfig.waiters.create', 'runtimeconfig.waiters.delete', 'runtimeconfig.waiters.get', 'runtimeconfig.waiters.list', 'runtimeconfig.waiters.update', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.anywhereCaches.create', 'storage.anywhereCaches.disable', 'storage.anywhereCaches.get', 'storage.anywhereCaches.list', 'storage.anywhereCaches.pause', 'storage.anywhereCaches.resume', 'storage.anywhereCaches.update', 'storage.bucketOperations.cancel', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.createTagBinding', 'storage.buckets.delete', 'storage.buckets.deleteTagBinding', 'storage.buckets.enableObjectRetention', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.getObjectInsights', 'storage.buckets.list', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings', 'storage.buckets.restore', 'storage.buckets.setIamPolicy', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.managementHubs.get', 'storage.managementHubs.update', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update'] |
|
GA |
| roles/firebaseappcheck.viewer |
Read-only access for Firebase App Check. |
Firebase App Check Viewer |
['firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.services.get'] |
|
GA |
| roles/firebaseappdistro.viewer |
Read-only access to Firebase App Distribution resources. |
Firebase App Distribution Viewer |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseappdistro.groups.list', 'firebaseappdistro.releases.list', 'firebaseappdistro.testers.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebasemods.serviceAgent |
Grants Firebase Extensions API Service Account access to manage resources. |
Firebase Extensions API Service Agent |
['appengine.applications.get', 'artifactregistry.packages.delete', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.setIamPolicy', 'cloudtasks.locations.get', 'cloudtasks.locations.list', 'cloudtasks.queues.create', 'cloudtasks.queues.delete', 'cloudtasks.queues.get', 'cloudtasks.queues.getIamPolicy', 'cloudtasks.queues.list', 'cloudtasks.queues.pause', 'cloudtasks.queues.purge', 'cloudtasks.queues.resume', 'cloudtasks.queues.setIamPolicy', 'cloudtasks.queues.update', 'cloudtasks.tasks.create', 'cloudtasks.tasks.fullView', 'deploymentmanager.compositeTypes.create', 'deploymentmanager.compositeTypes.delete', 'deploymentmanager.compositeTypes.get', 'deploymentmanager.compositeTypes.list', 'deploymentmanager.compositeTypes.update', 'deploymentmanager.deployments.cancelPreview', 'deploymentmanager.deployments.create', 'deploymentmanager.deployments.delete', 'deploymentmanager.deployments.get', 'deploymentmanager.deployments.list', 'deploymentmanager.deployments.stop', 'deploymentmanager.deployments.update', 'deploymentmanager.manifests.get', 'deploymentmanager.manifests.list', 'deploymentmanager.operations.get', 'deploymentmanager.operations.list', 'deploymentmanager.resources.get', 'deploymentmanager.resources.list', 'deploymentmanager.typeProviders.create', 'deploymentmanager.typeProviders.delete', 'deploymentmanager.typeProviders.get', 'deploymentmanager.typeProviders.getType', 'deploymentmanager.typeProviders.list', 'deploymentmanager.typeProviders.listTypes', 'deploymentmanager.typeProviders.update', 'deploymentmanager.types.create', 'deploymentmanager.types.delete', 'deploymentmanager.types.get', 'deploymentmanager.types.list', 'deploymentmanager.types.update', 'eventarc.channels.create', 'eventarc.channels.delete', 'eventarc.channels.get', 'eventarc.channels.setIamPolicy', 'iam.serviceAccounts.actAs', 'iam.serviceAccounts.create', 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'resourcemanager.projects.updateLiens', 'run.services.getIamPolicy', 'run.services.setIamPolicy', 'serviceusage.quotas.get', 'serviceusage.services.enable', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/firebase.managementServiceAgent |
Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services. |
Firebase Service Management Service Agent |
['apikeys.keys.create', 'apikeys.keys.get', 'apikeys.keys.list', 'apikeys.keys.update', 'appengine.applications.create', 'appengine.applications.get', 'appengine.applications.update', 'appengine.operations.get', 'appengine.services.list', 'bigquery.datasets.create', 'bigquery.datasets.get', 'bigquery.datasets.update', 'bigquery.transfers.get', 'bigquery.transfers.update', 'clientauthconfig.brands.create', 'clientauthconfig.brands.update', 'clientauthconfig.clients.create', 'clientauthconfig.clients.getWithSecret', 'clientauthconfig.clients.list', 'clientauthconfig.clients.update', 'firebase.clients.create', 'firebase.clients.delete', 'firebase.clients.get', 'firebase.clients.undelete', 'firebase.projects.delete', 'firebase.projects.get', 'firebase.projects.update', 'firebaseabt.experiments.delete', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.update', 'firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.rulesets.create', 'firebasestorage.defaultBucket.get', 'iam.roles.get', 'iam.serviceAccounts.create', 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.setIamPolicy', 'resourcemanager.projects.update', 'servicemanagement.services.bind', 'serviceusage.services.enable', 'serviceusage.services.get', 'serviceusage.services.list', 'serviceusage.services.use', 'storage.buckets.create', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.list', 'storage.buckets.setIamPolicy'] |
|
GA |
| roles/firebase.qualityViewer |
Read access to Firebase Quality products and Analytics. |
Firebase Quality Viewer |
['apikeys.keys.get', 'apikeys.keys.list', 'cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappdistro.groups.list', 'firebaseappdistro.releases.list', 'firebaseappdistro.testers.list', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.sessions.get', 'firebaseextensions.configs.list', 'firebaseperformance.data.get', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list'] |
|
GA |
| roles/firebaseappcheck.serviceAgent |
Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API. |
Firebase App Check Service Agent |
['recaptchaenterprise.assessments.annotate', 'recaptchaenterprise.assessments.create', 'serviceusage.services.use'] |
|
GA |
| roles/firebasestorage.serviceAgent |
Access to Cloud Storage for Firebase through API and SDK. |
Cloud Storage for Firebase Service Agent |
['storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.update'] |
|
GA |
| roles/firebase.analyticsViewer |
Read access to Google Analytics for Firebase. |
Firebase Analytics Viewer |
['cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseextensions.configs.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list'] |
|
GA |
| roles/firebase.viewer |
Read-only access to Firebase products. |
Firebase Viewer |
['apikeys.keys.get', 'apikeys.keys.list', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotations.list', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.datasets.get', 'automl.datasets.list', 'automl.examples.get', 'automl.examples.list', 'automl.files.list', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.list', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.get', 'automl.models.list', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudconfig.configs.get', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.list', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudnotifications.activities.list', 'cloudtestservice.environmentcatalog.get', 'cloudtestservice.matrices.get', 'cloudtoolresults.executions.get', 'cloudtoolresults.executions.list', 'cloudtoolresults.histories.get', 'cloudtoolresults.histories.list', 'cloudtoolresults.settings.get', 'cloudtoolresults.steps.get', 'cloudtoolresults.steps.list', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.list', 'datastore.entities.get', 'datastore.entities.list', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.statistics.get', 'datastore.statistics.list', 'errorreporting.groups.list', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleChannelConfigs.get', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.use', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.services.get', 'firebaseappdistro.groups.list', 'firebaseappdistro.releases.list', 'firebaseappdistro.testers.list', 'firebaseauth.configs.get', 'firebaseauth.users.get', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.sessions.get', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.services.get', 'firebasedataconnect.services.list', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.list', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebaseperformance.data.get', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.defaultBucket.get', 'logging.logEntries.list', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'remotebuildexecution.blobs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.get', 'run.executions.list', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.locations.list', 'run.operations.get', 'run.operations.list', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.list', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.tasks.get', 'run.tasks.list', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.list', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list'] |
|
GA |
| roles/firebasestorage.admin |
Full management of Cloud Storage for Firebase. |
Cloud Storage for Firebase Admin |
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasestorage.buckets.addFirebase', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.buckets.removeFirebase', 'firebasestorage.defaultBucket.create', 'firebasestorage.defaultBucket.delete', 'firebasestorage.defaultBucket.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list'] |
|
BETA |