roles/firebasehosting.admin
Full read/write access to Firebase Hosting resources.
Firebase Hosting Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasedatabase.admin
Full read/write access to Firebase Realtime Database resources.
Firebase Realtime Database Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.growthAdmin
Full access to Firebase Grow products and Analytics.
Firebase Grow Admin
['apikeys.keys.get', 'apikeys.keys.list', 'clientauthconfig.clients.get', 'clientauthconfig.clients.list', 'cloudconfig.configs.get', 'cloudconfig.configs.update', 'cloudmessaging.messages.create', 'cloudnotifications.activities.list', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.create', 'firebaseabt.experiments.delete', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.experiments.update', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.destinations.update', 'firebasedynamiclinks.domains.create', 'firebasedynamiclinks.domains.delete', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.domains.update', 'firebasedynamiclinks.links.create', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.links.update', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.list', 'firebaseinappmessaging.campaigns.create', 'firebaseinappmessaging.campaigns.delete', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebaseinappmessaging.campaigns.update', 'firebasemessagingcampaigns.campaigns.create', 'firebasemessagingcampaigns.campaigns.delete', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasemessagingcampaigns.campaigns.start', 'firebasemessagingcampaigns.campaigns.stop', 'firebasemessagingcampaigns.campaigns.update', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list']
Copy Permissions
GA
roles/firebaseextensions.developer
View, create, and delete Firebase Extensions Instances and Extensions Versions, and update Extensions Instances
Firebase Extensions Developer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebasemessagingcampaigns.admin
Full management of Firebase Messaging Campaigns.
Firebase Messaging Campaigns Admin
['firebasemessagingcampaigns.campaigns.create', 'firebasemessagingcampaigns.campaigns.delete', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasemessagingcampaigns.campaigns.start', 'firebasemessagingcampaigns.campaigns.stop', 'firebasemessagingcampaigns.campaigns.update']
Copy Permissions
BETA
roles/firebasestorage.viewer
Read-only access for Cloud Storage for Firebase.
Cloud Storage for Firebase Viewer
['firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.defaultBucket.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseauth.viewer
Read-only access to Firebase Authentication resources.
Firebase Authentication Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseauth.configs.get', 'firebaseauth.users.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasedatabase.viewer
Read-only access to Firebase Realtime Database resources.
Firebase Realtime Database Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaseinappmessaging.admin
Full read/write access to Firebase In-App Messaging resources.
Firebase In-App Messaging Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseinappmessaging.campaigns.create', 'firebaseinappmessaging.campaigns.delete', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebaseinappmessaging.campaigns.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebasedataconnect.admin
Full access to Firebase Data Connect API resources, including data.
Firebase Data Connect API Admin
['firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.impersonateMutation', 'firebasedataconnect.connectors.impersonateQuery', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebasehosting.viewer
Read-only access to Firebase Hosting resources.
Firebase Hosting Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.sdkProvisioningServiceAgent
Access to provision apps with the Admin SDK.
Firebase SDK Provisioning Service Agent
['apikeys.keys.list', 'clientauthconfig.clients.list', 'cloudmessaging.messages.create', 'firebase.clients.create', 'servicemanagement.services.bind', 'serviceusage.services.enable', 'serviceusage.services.get']
Copy Permissions
GA
roles/firebaseapphosting.serviceAgent
Gives Firebase App Hosting access to resource for Building & Deploying Backends.
Firebase App Hosting Service Agent
['artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.repositories.create', 'artifactregistry.repositories.delete', 'artifactregistry.repositories.deleteArtifacts', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.update', 'cloudbuild.builds.create', 'cloudbuild.builds.get', 'cloudbuild.builds.update', 'cloudbuild.connections.get', 'cloudbuild.operations.get', 'cloudbuild.repositories.accessReadToken', 'cloudbuild.repositories.accessReadWriteToken', 'cloudbuild.repositories.get', 'developerconnect.connections.get', 'developerconnect.gitRepositoryLinks.fetchReadToken', 'developerconnect.gitRepositoryLinks.fetchReadWriteToken', 'developerconnect.gitRepositoryLinks.get', 'firebaseapphosting.backends.create', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.get', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'iam.serviceAccounts.actAs', 'run.operations.delete', 'run.operations.get', 'run.revisions.delete', 'run.revisions.get', 'run.routes.get', 'run.routes.invoke', 'run.services.create', 'run.services.delete', 'run.services.get', 'run.services.update', 'serviceusage.services.use']
Copy Permissions
GA
roles/firebaseextensions.viewer
Viewer of Firebase Extensions Instances
Firebase Extensions Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebase.sdkAdminServiceAgent
Read and write access to Firebase products available in the Admin SDK
Firebase Admin SDK Administrator Service Agent
['appengine.applications.get', 'cloudconfig.configs.get', 'cloudconfig.configs.update', 'cloudmessaging.messages.create', 'databasesconsole.locations.get', 'databasesconsole.locations.list', 'databasesconsole.studioQueries.create', 'databasesconsole.studioQueries.delete', 'databasesconsole.studioQueries.search', 'databasesconsole.studioQueries.update', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.list', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.insights.get', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.statistics.get', 'datastore.statistics.list', 'firebase.clients.create', 'firebase.clients.delete', 'firebase.clients.get', 'firebase.clients.list', 'firebase.clients.undelete', 'firebase.clients.update', 'firebase.projects.get', 'firebase.projects.update', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.automations.create', 'firebaseappcheck.automations.delete', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.automations.resume', 'firebaseappcheck.automations.suspend', 'firebaseappcheck.automations.update', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.impersonateMutation', 'firebasedataconnect.connectors.impersonateQuery', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'identitytoolkit.tenants.create', 'identitytoolkit.tenants.delete', 'identitytoolkit.tenants.get', 'identitytoolkit.tenants.getIamPolicy', 'identitytoolkit.tenants.list', 'identitytoolkit.tenants.setIamPolicy', 'identitytoolkit.tenants.update', 'monitoring.timeSeries.create', 'orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'resourcemanager.projects.update', 'storage.buckets.create', 'storage.buckets.delete', 'storage.buckets.get', 'storage.buckets.list', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.list', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.move', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update']
Copy Permissions
GA
roles/firebaseappcheck.tokenVerifier
Access to token verification capabilities for Firebase App Check.
Firebase App Check Token Verifier
['firebaseappcheck.appCheckTokens.verify']
Copy Permissions
GA
roles/firebaseextensionspublisher.extensionsAdmin
Fully manage Firebase Extensions
Firebase Extensions Publisher - Extensions Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseextensionspublisher.extensions.create', 'firebaseextensionspublisher.extensions.delete', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebase.growthViewer
Read access to Firebase Grow products and Analytics.
Firebase Grow Viewer
['apikeys.keys.get', 'apikeys.keys.list', 'cloudconfig.configs.get', 'cloudnotifications.activities.list', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.list', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list']
Copy Permissions
GA
roles/firebaseabt.admin
Full read/write access to Firebase A/B Testing resources.
Firebase A/B Testing Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.create', 'firebaseabt.experiments.delete', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.experiments.update', 'firebaseabt.projectmetadata.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebase.developViewer
Read access to Firebase Develop products and Analytics.
Firebase Develop Viewer
['apikeys.keys.get', 'apikeys.keys.list', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotations.list', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.datasets.get', 'automl.datasets.list', 'automl.examples.get', 'automl.examples.list', 'automl.files.list', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.list', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.get', 'automl.models.list', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'cloudasset.assets.searchAllResources', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.locations.get', 'cloudbuild.locations.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.list', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudnotifications.activities.list', 'datastore.backups.get', 'datastore.backups.list', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.list', 'datastore.entities.get', 'datastore.entities.list', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.statistics.get', 'datastore.statistics.list', 'errorreporting.groups.list', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleChannelConfigs.get', 'eventarc.kafkaSources.get', 'eventarc.kafkaSources.getIamPolicy', 'eventarc.kafkaSources.list', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.use', 'eventarc.multiProjectSources.collectGoogleApiEvents', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.services.get', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.traffic.get', 'firebaseauth.configs.get', 'firebaseauth.users.get', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'firebaseextensions.configs.list', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.defaultBucket.get', 'firebasevertexai.configs.get', 'logging.logEntries.list', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'remotebuildexecution.blobs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.get', 'run.executions.list', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.locations.list', 'run.operations.get', 'run.operations.list', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.list', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.tasks.get', 'run.tasks.list', 'run.workerpools.get', 'run.workerpools.getIamPolicy', 'run.workerpools.list', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.list', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list']
Copy Permissions
GA
roles/firebasecloudmessaging.admin
Full read/write access to Firebase Cloud Messaging API resources.
Firebase Cloud Messaging API Admin
['cloudmessaging.messages.create', 'fcmdata.deliverydata.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaseml.viewer
Read-only access to Firebase ML Kit resources.
Firebase ML Kit Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseperformance.admin
Full access to firebaseperformance resources.
Firebase Performance Reporting Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseperformance.config.update', 'firebaseperformance.data.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasevertexai.admin
Full access to Firebase AI Logic resources.
Firebase AI Logic Admin
['firebasevertexai.configs.get', 'firebasevertexai.configs.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseml.serviceAgent
Access to Cloud ML and AI resources used by Firebase ML
Firebase Machine Learning Service Agent
['aiplatform.endpoints.predict', 'logging.logEntries.create', 'logging.logEntries.route', 'telemetry.metrics.write', 'telemetry.traces.write']
Copy Permissions
GA
roles/firebasedataconnect.dataViewer
Readonly access to data sources.
Firebase Data Connect API Data Viewer
['firebasedataconnect.connectors.impersonateQuery', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.introspectGraphql']
Copy Permissions
BETA
roles/firebaseappcheck.admin
Full management of Firebase App Check.
Firebase App Check Admin
['firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.automations.create', 'firebaseappcheck.automations.delete', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.automations.resume', 'firebaseappcheck.automations.suspend', 'firebaseappcheck.automations.update', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update']
Copy Permissions
GA
roles/firebasenotifications.admin
Full read/write access to Firebase Cloud Messaging resources.
Firebase Cloud Messaging Admin
['fcmdata.deliverydata.list', 'firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaserules.system
Read/write/list access for Datastore entities and Cloud Storage objects, as well as get/list/publish access for PubSub topics.
Firebase Rules System
['datastore.databases.get', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'pubsub.topics.get', 'pubsub.topics.list', 'pubsub.topics.publish', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.list', 'storage.objects.update']
Copy Permissions
GA
roles/firebaseextensionspublisher.extensionsViewer
View Firebase Extensions
Firebase Extensions Publisher - Extensions Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseabt.viewer
Read-only access to Firebase A/B Testing resources.
Firebase A/B Testing Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.projectmetadata.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebasedataconnect.dataAdmin
Full access to data sources.
Firebase Data Connect API Data Admin
['firebasedataconnect.connectors.impersonateMutation', 'firebasedataconnect.connectors.impersonateQuery', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.introspectGraphql']
Copy Permissions
BETA
roles/firebasecrashlytics.admin
Full read/write access to Firebase Crashlytics resources.
Firebase Crashlytics Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.config.update', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.issues.update', 'firebasecrashlytics.sessions.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaseapphosting.computeRunner
Contains the basic necessary permissions for building and running Apps on Firebase App Hosting. Gives access to get and update App Hosting builds, upload artifacts to Artifact Registry and Storage, write logs. Intended to be granted to the user-supplied App Hosting Compute service account.
Firebase App Hosting Compute Runner
['artifactregistry.aptartifacts.create', 'artifactregistry.attachments.create', 'artifactregistry.attachments.delete', 'artifactregistry.attachments.get', 'artifactregistry.attachments.list', 'artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.files.download', 'artifactregistry.files.get', 'artifactregistry.files.list', 'artifactregistry.files.update', 'artifactregistry.files.upload', 'artifactregistry.kfpartifacts.create', 'artifactregistry.locations.get', 'artifactregistry.locations.list', 'artifactregistry.mavenartifacts.get', 'artifactregistry.mavenartifacts.list', 'artifactregistry.npmpackages.get', 'artifactregistry.npmpackages.list', 'artifactregistry.packages.get', 'artifactregistry.packages.list', 'artifactregistry.packages.update', 'artifactregistry.projectsettings.get', 'artifactregistry.pythonpackages.get', 'artifactregistry.pythonpackages.list', 'artifactregistry.repositories.createOnPush', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.list', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'artifactregistry.repositories.readViaVirtualRepository', 'artifactregistry.repositories.uploadArtifacts', 'artifactregistry.rules.get', 'artifactregistry.rules.list', 'artifactregistry.tags.create', 'artifactregistry.tags.get', 'artifactregistry.tags.list', 'artifactregistry.tags.update', 'artifactregistry.versions.get', 'artifactregistry.versions.list', 'artifactregistry.yumartifacts.create', 'cloudtrace.traces.patch', 'developerconnect.connections.get', 'developerconnect.gitRepositoryLinks.fetchReadToken', 'developerconnect.gitRepositoryLinks.get', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.traffic.get', 'logging.logEntries.create', 'logging.logEntries.route', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create', 'orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.list', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.list', 'storage.objects.move', 'storage.objects.restore', 'storage.objects.setRetention', 'storage.objects.update', 'telemetry.metrics.write', 'telemetry.traces.write']
Copy Permissions
BETA
roles/firebasevertexai.viewer
Read access to Firebase AI Logic resources.
Firebase AI Logic Viewer
['firebasevertexai.configs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseml.admin
Full read/write access to Firebase ML Kit resources.
Firebase ML Kit Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseappdistro.admin
Full read/write access to Firebase App Distribution resources.
Firebase App Distribution Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasedataconnect.serviceAgent
Gives Firebase Data Connect access to administer Cloud SQL instances.
Firebase Data Connect Service Agent
['cloudsql.databases.create', 'cloudsql.databases.get', 'cloudsql.instances.connect', 'cloudsql.instances.get', 'cloudsql.instances.login', 'cloudsql.users.create', 'cloudsql.users.get', 'serviceusage.services.use']
Copy Permissions
GA
roles/firebasedatabase.serviceAgent
Access to publish triggers
Firebase Realtime Database Service Agent
['pubsub.topics.publish', 'serviceusage.services.use']
Copy Permissions
GA
roles/firebasedynamiclinks.viewer
Read-only access to Firebase Dynamic Links resources.
Firebase Dynamic Links Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.stats.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaserules.firestoreServiceAgent
Grants Firebase Security Rules access to Firestore for providing cross-service Rules.
Firebase Rules Firestore Service Agent
['datastore.entities.get']
Copy Permissions
GA
roles/firebasemessagingcampaigns.viewer
Read-only access for Firebase Messaging Campaigns.
Firebase Messaging Campaigns Viewer
['firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list']
Copy Permissions
BETA
roles/firebaseapphosting.viewer
Grants readonly access to Firebase App Hosting resources, but not permission to invoke the backend. Intended for auditors, PMs, ect. Includes minimal viewer permissions for Firebase Console.
Firebase App Hosting Viewer
['firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.traffic.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseauth.admin
Full read/write access to Firebase Authentication resources.
Firebase Authentication Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getHashConfig', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.analyticsAdmin
Full access to Google Analytics for Firebase.
Firebase Analytics Admin
['cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseextensions.configs.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaseapphosting.admin
Full access to Firebase App Hosting API resources.
Firebase App Hosting Admin
['firebaseapphosting.backends.create', 'firebaseapphosting.backends.delete', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.delete', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.create', 'firebaseapphosting.domains.delete', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.domains.update', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.delete', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.delete', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseperformance.viewer
Read-only access to firebaseperformance resources.
Firebase Performance Reporting Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseperformance.data.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasecrashlytics.serviceAgent
Access to BigQuery export for Crashlytics
Firebase Crashlytics Service Agent
['bigquery.datasets.create', 'bigquery.datasets.get', 'bigquery.tables.create', 'bigquery.tables.get', 'bigquery.tables.getData', 'bigquery.tables.update', 'bigquery.tables.updateData', 'serviceusage.services.use']
Copy Permissions
GA
roles/firebasenotifications.viewer
Read-only access to Firebase Cloud Messaging resources.
Firebase Cloud Messaging Viewer
['fcmdata.deliverydata.list', 'firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebaserules.viewer
Read-only access on all resources with the ability to test Rulesets.
Firebase Rules Viewer
['firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.appDistributionSdkServiceAgent
Read and write access to Firebase App Distribution with the Admin SDK
Firebase App Distribution Admin SDK Service Agent
['firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update']
Copy Permissions
GA
roles/firebasecrash.symbolMappingsAdmin
Full read/write access to symbol mapping file resources for Firebase Crash Reporting.
Firebase Crash Symbol Uploader
['firebase.clients.get', 'firebase.clients.list', 'resourcemanager.projects.get']
Copy Permissions
GA
roles/firebaserules.admin
Full management of Firebase Rules.
Firebase Rules Admin
['firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.getExecutable', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebaserules.rulesets.test', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasedataconnect.viewer
Readonly access to Firebase Data Connect API resources. This role does not grant any access to data.
Firebase Data Connect API Viewer
['firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebase.qualityAdmin
Full access to Firebase Quality products and Analytics.
Firebase Quality Admin
['apikeys.keys.get', 'apikeys.keys.list', 'cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update', 'firebasecrash.issues.update', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.config.update', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.issues.update', 'firebasecrashlytics.sessions.get', 'firebaseextensions.configs.list', 'firebaseperformance.config.update', 'firebaseperformance.data.get', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list']
Copy Permissions
GA
roles/firebaseinappmessaging.viewer
Read-only access to Firebase In-App Messaging resources.
Firebase In-App Messaging Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebasedynamiclinks.admin
Full read/write access to Firebase Dynamic Links resources.
Firebase Dynamic Links Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.destinations.update', 'firebasedynamiclinks.domains.create', 'firebasedynamiclinks.domains.delete', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.domains.update', 'firebasedynamiclinks.links.create', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.links.update', 'firebasedynamiclinks.stats.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.developAdmin
Full access to Firebase Develop products and Analytics.
Firebase Develop Admin
['apikeys.keys.get', 'apikeys.keys.getKeyString', 'apikeys.keys.list', 'apikeys.keys.lookup', 'appengine.applications.get', 'artifactregistry.attachments.get', 'artifactregistry.attachments.list', 'artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.files.download', 'artifactregistry.files.get', 'artifactregistry.files.list', 'artifactregistry.locations.get', 'artifactregistry.locations.list', 'artifactregistry.mavenartifacts.get', 'artifactregistry.mavenartifacts.list', 'artifactregistry.npmpackages.get', 'artifactregistry.npmpackages.list', 'artifactregistry.packages.get', 'artifactregistry.packages.list', 'artifactregistry.projectsettings.get', 'artifactregistry.pythonpackages.get', 'artifactregistry.pythonpackages.list', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.list', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'artifactregistry.repositories.readViaVirtualRepository', 'artifactregistry.rules.get', 'artifactregistry.rules.list', 'artifactregistry.tags.get', 'artifactregistry.tags.list', 'artifactregistry.versions.get', 'artifactregistry.versions.list', 'automl.annotationSpecs.create', 'automl.annotationSpecs.delete', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotationSpecs.update', 'automl.annotations.approve', 'automl.annotations.create', 'automl.annotations.list', 'automl.annotations.manipulate', 'automl.annotations.reject', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.columnSpecs.update', 'automl.datasets.create', 'automl.datasets.delete', 'automl.datasets.export', 'automl.datasets.get', 'automl.datasets.getIamPolicy', 'automl.datasets.import', 'automl.datasets.list', 'automl.datasets.setIamPolicy', 'automl.datasets.update', 'automl.examples.delete', 'automl.examples.get', 'automl.examples.list', 'automl.examples.update', 'automl.files.delete', 'automl.files.list', 'automl.humanAnnotationTasks.create', 'automl.humanAnnotationTasks.delete', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.getIamPolicy', 'automl.locations.list', 'automl.locations.setIamPolicy', 'automl.modelEvaluations.create', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.create', 'automl.models.delete', 'automl.models.deploy', 'automl.models.export', 'automl.models.get', 'automl.models.getIamPolicy', 'automl.models.list', 'automl.models.predict', 'automl.models.setIamPolicy', 'automl.models.undeploy', 'automl.operations.cancel', 'automl.operations.delete', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'automl.tableSpecs.update', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'clientauthconfig.brands.update', 'clientauthconfig.clients.get', 'clientauthconfig.clients.list', 'cloudasset.assets.searchAllResources', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.locations.get', 'cloudbuild.locations.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudfunctions.functions.call', 'cloudfunctions.functions.create', 'cloudfunctions.functions.delete', 'cloudfunctions.functions.generationUpgrade', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.invoke', 'cloudfunctions.functions.list', 'cloudfunctions.functions.setIamPolicy', 'cloudfunctions.functions.sourceCodeGet', 'cloudfunctions.functions.sourceCodeSet', 'cloudfunctions.functions.update', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudkms.keyHandles.create', 'cloudkms.keyHandles.get', 'cloudkms.keyHandles.list', 'cloudkms.operations.get', 'cloudkms.projects.showEffectiveAutokeyConfig', 'cloudnotifications.activities.list', 'databasesconsole.locations.get', 'databasesconsole.locations.list', 'databasesconsole.studioQueries.create', 'databasesconsole.studioQueries.delete', 'databasesconsole.studioQueries.get', 'databasesconsole.studioQueries.list', 'databasesconsole.studioQueries.search', 'databasesconsole.studioQueries.update', 'datastore.backupSchedules.create', 'datastore.backupSchedules.delete', 'datastore.backupSchedules.get', 'datastore.backupSchedules.list', 'datastore.backupSchedules.update', 'datastore.backups.delete', 'datastore.backups.get', 'datastore.backups.list', 'datastore.backups.restoreDatabase', 'datastore.databases.bulkDelete', 'datastore.databases.clone', 'datastore.databases.create', 'datastore.databases.createTagBinding', 'datastore.databases.delete', 'datastore.databases.deleteTagBinding', 'datastore.databases.export', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.import', 'datastore.databases.list', 'datastore.databases.listEffectiveTags', 'datastore.databases.listTagBindings', 'datastore.databases.update', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'datastore.indexes.create', 'datastore.indexes.delete', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.indexes.update', 'datastore.insights.get', 'datastore.keyVisualizerScans.get', 'datastore.keyVisualizerScans.list', 'datastore.locations.get', 'datastore.locations.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.operations.cancel', 'datastore.operations.delete', 'datastore.operations.get', 'datastore.operations.list', 'datastore.statistics.get', 'datastore.statistics.list', 'datastore.userCreds.create', 'datastore.userCreds.delete', 'datastore.userCreds.get', 'datastore.userCreds.list', 'datastore.userCreds.update', 'errorreporting.groups.list', 'eventarc.channelConnections.create', 'eventarc.channelConnections.delete', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channelConnections.publish', 'eventarc.channelConnections.setIamPolicy', 'eventarc.channels.attach', 'eventarc.channels.create', 'eventarc.channels.delete', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.channels.publish', 'eventarc.channels.setIamPolicy', 'eventarc.channels.undelete', 'eventarc.channels.update', 'eventarc.enrollments.create', 'eventarc.enrollments.delete', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.enrollments.setIamPolicy', 'eventarc.enrollments.update', 'eventarc.events.receiveAuditLogWritten', 'eventarc.events.receiveEvent', 'eventarc.googleApiSources.create', 'eventarc.googleApiSources.delete', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleApiSources.setIamPolicy', 'eventarc.googleApiSources.update', 'eventarc.googleChannelConfigs.get', 'eventarc.googleChannelConfigs.update', 'eventarc.kafkaSources.create', 'eventarc.kafkaSources.delete', 'eventarc.kafkaSources.get', 'eventarc.kafkaSources.getIamPolicy', 'eventarc.kafkaSources.list', 'eventarc.kafkaSources.setIamPolicy', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.create', 'eventarc.messageBuses.delete', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.publish', 'eventarc.messageBuses.setIamPolicy', 'eventarc.messageBuses.update', 'eventarc.messageBuses.use', 'eventarc.multiProjectSources.collectGoogleApiEvents', 'eventarc.operations.cancel', 'eventarc.operations.delete', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.create', 'eventarc.pipelines.delete', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.pipelines.setIamPolicy', 'eventarc.pipelines.update', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.create', 'eventarc.triggers.delete', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'eventarc.triggers.setIamPolicy', 'eventarc.triggers.undelete', 'eventarc.triggers.update', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.automations.create', 'firebaseappcheck.automations.delete', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.automations.resume', 'firebaseappcheck.automations.suspend', 'firebaseappcheck.automations.update', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update', 'firebaseapphosting.backends.create', 'firebaseapphosting.backends.delete', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.delete', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.create', 'firebaseapphosting.domains.delete', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.domains.update', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.delete', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.delete', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getHashConfig', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.impersonateMutation', 'firebasedataconnect.connectors.impersonateQuery', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'firebaseextensions.configs.list', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.getExecutable', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebaserules.rulesets.test', 'firebasestorage.buckets.addFirebase', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.buckets.removeFirebase', 'firebasestorage.defaultBucket.create', 'firebasestorage.defaultBucket.delete', 'firebasestorage.defaultBucket.get', 'firebasevertexai.configs.get', 'firebasevertexai.configs.update', 'logging.logEntries.list', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'orgpolicy.policy.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceInsights.update', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.cloudFunctionsPerformanceRecommendations.update', 'recommender.iamPolicyInsights.get', 'recommender.iamPolicyInsights.list', 'recommender.iamPolicyInsights.update', 'recommender.iamPolicyRecommendations.get', 'recommender.iamPolicyRecommendations.list', 'recommender.iamPolicyRecommendations.update', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostInsights.update', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceCostRecommendations.update', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityInsights.update', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServiceIdentityRecommendations.update', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceInsights.update', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServicePerformanceRecommendations.update', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityInsights.update', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'recommender.runServiceSecurityRecommendations.update', 'recommender.storageBucketSoftDeleteInsights.get', 'recommender.storageBucketSoftDeleteInsights.list', 'recommender.storageBucketSoftDeleteInsights.update', 'recommender.storageBucketSoftDeleteRecommendations.get', 'recommender.storageBucketSoftDeleteRecommendations.list', 'recommender.storageBucketSoftDeleteRecommendations.update', 'remotebuildexecution.blobs.get', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.cancel', 'run.executions.delete', 'run.executions.get', 'run.executions.list', 'run.jobs.create', 'run.jobs.createTagBinding', 'run.jobs.delete', 'run.jobs.deleteTagBinding', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.jobs.run', 'run.jobs.runWithOverrides', 'run.jobs.setIamPolicy', 'run.jobs.update', 'run.locations.list', 'run.operations.delete', 'run.operations.get', 'run.operations.list', 'run.revisions.delete', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.invoke', 'run.routes.list', 'run.services.create', 'run.services.createTagBinding', 'run.services.delete', 'run.services.deleteTagBinding', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.services.setIamPolicy', 'run.services.update', 'run.tasks.get', 'run.tasks.list', 'run.workerpools.create', 'run.workerpools.delete', 'run.workerpools.get', 'run.workerpools.getIamPolicy', 'run.workerpools.list', 'run.workerpools.setIamPolicy', 'run.workerpools.update', 'runtimeconfig.configs.create', 'runtimeconfig.configs.delete', 'runtimeconfig.configs.get', 'runtimeconfig.configs.list', 'runtimeconfig.configs.update', 'runtimeconfig.operations.get', 'runtimeconfig.operations.list', 'runtimeconfig.variables.create', 'runtimeconfig.variables.delete', 'runtimeconfig.variables.get', 'runtimeconfig.variables.list', 'runtimeconfig.variables.update', 'runtimeconfig.variables.watch', 'runtimeconfig.waiters.create', 'runtimeconfig.waiters.delete', 'runtimeconfig.waiters.get', 'runtimeconfig.waiters.list', 'runtimeconfig.waiters.update', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.anywhereCaches.create', 'storage.anywhereCaches.disable', 'storage.anywhereCaches.get', 'storage.anywhereCaches.list', 'storage.anywhereCaches.pause', 'storage.anywhereCaches.resume', 'storage.anywhereCaches.update', 'storage.bucketOperations.cancel', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.createTagBinding', 'storage.buckets.delete', 'storage.buckets.deleteTagBinding', 'storage.buckets.enableObjectRetention', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.getIpFilter', 'storage.buckets.getObjectInsights', 'storage.buckets.list', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings', 'storage.buckets.relocate', 'storage.buckets.restore', 'storage.buckets.setIamPolicy', 'storage.buckets.setIpFilter', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.intelligenceConfigs.get', 'storage.intelligenceConfigs.update', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.move', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update']
Copy Permissions
GA
roles/firebasecrashlytics.viewer
Read-only access to Firebase Crashlytics resources.
Firebase Crashlytics Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.sessions.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.admin
Full access to Firebase products.
Firebase Admin
['apikeys.keys.get', 'apikeys.keys.getKeyString', 'apikeys.keys.list', 'apikeys.keys.lookup', 'appengine.applications.get', 'artifactregistry.attachments.get', 'artifactregistry.attachments.list', 'artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.files.download', 'artifactregistry.files.get', 'artifactregistry.files.list', 'artifactregistry.locations.get', 'artifactregistry.locations.list', 'artifactregistry.mavenartifacts.get', 'artifactregistry.mavenartifacts.list', 'artifactregistry.npmpackages.get', 'artifactregistry.npmpackages.list', 'artifactregistry.packages.get', 'artifactregistry.packages.list', 'artifactregistry.projectsettings.get', 'artifactregistry.pythonpackages.get', 'artifactregistry.pythonpackages.list', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.list', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'artifactregistry.repositories.readViaVirtualRepository', 'artifactregistry.rules.get', 'artifactregistry.rules.list', 'artifactregistry.tags.get', 'artifactregistry.tags.list', 'artifactregistry.versions.get', 'artifactregistry.versions.list', 'automl.annotationSpecs.create', 'automl.annotationSpecs.delete', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotationSpecs.update', 'automl.annotations.approve', 'automl.annotations.create', 'automl.annotations.list', 'automl.annotations.manipulate', 'automl.annotations.reject', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.columnSpecs.update', 'automl.datasets.create', 'automl.datasets.delete', 'automl.datasets.export', 'automl.datasets.get', 'automl.datasets.getIamPolicy', 'automl.datasets.import', 'automl.datasets.list', 'automl.datasets.setIamPolicy', 'automl.datasets.update', 'automl.examples.delete', 'automl.examples.get', 'automl.examples.list', 'automl.examples.update', 'automl.files.delete', 'automl.files.list', 'automl.humanAnnotationTasks.create', 'automl.humanAnnotationTasks.delete', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.getIamPolicy', 'automl.locations.list', 'automl.locations.setIamPolicy', 'automl.modelEvaluations.create', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.create', 'automl.models.delete', 'automl.models.deploy', 'automl.models.export', 'automl.models.get', 'automl.models.getIamPolicy', 'automl.models.list', 'automl.models.predict', 'automl.models.setIamPolicy', 'automl.models.undeploy', 'automl.operations.cancel', 'automl.operations.delete', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'automl.tableSpecs.update', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'clientauthconfig.brands.update', 'clientauthconfig.clients.create', 'clientauthconfig.clients.delete', 'clientauthconfig.clients.get', 'clientauthconfig.clients.list', 'clientauthconfig.clients.update', 'cloudasset.assets.searchAllResources', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.locations.get', 'cloudbuild.locations.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudconfig.configs.get', 'cloudconfig.configs.update', 'cloudfunctions.functions.call', 'cloudfunctions.functions.create', 'cloudfunctions.functions.delete', 'cloudfunctions.functions.generationUpgrade', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.invoke', 'cloudfunctions.functions.list', 'cloudfunctions.functions.setIamPolicy', 'cloudfunctions.functions.sourceCodeGet', 'cloudfunctions.functions.sourceCodeSet', 'cloudfunctions.functions.update', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudkms.keyHandles.create', 'cloudkms.keyHandles.get', 'cloudkms.keyHandles.list', 'cloudkms.operations.get', 'cloudkms.projects.showEffectiveAutokeyConfig', 'cloudmessaging.messages.create', 'cloudnotifications.activities.list', 'cloudtestservice.environmentcatalog.get', 'cloudtestservice.matrices.create', 'cloudtestservice.matrices.get', 'cloudtestservice.matrices.update', 'cloudtoolresults.executions.create', 'cloudtoolresults.executions.get', 'cloudtoolresults.executions.list', 'cloudtoolresults.executions.update', 'cloudtoolresults.histories.create', 'cloudtoolresults.histories.get', 'cloudtoolresults.histories.list', 'cloudtoolresults.settings.create', 'cloudtoolresults.settings.get', 'cloudtoolresults.settings.update', 'cloudtoolresults.steps.create', 'cloudtoolresults.steps.get', 'cloudtoolresults.steps.list', 'cloudtoolresults.steps.update', 'databasesconsole.locations.get', 'databasesconsole.locations.list', 'databasesconsole.studioQueries.create', 'databasesconsole.studioQueries.delete', 'databasesconsole.studioQueries.get', 'databasesconsole.studioQueries.list', 'databasesconsole.studioQueries.search', 'databasesconsole.studioQueries.update', 'datastore.backupSchedules.create', 'datastore.backupSchedules.delete', 'datastore.backupSchedules.get', 'datastore.backupSchedules.list', 'datastore.backupSchedules.update', 'datastore.backups.delete', 'datastore.backups.get', 'datastore.backups.list', 'datastore.backups.restoreDatabase', 'datastore.databases.bulkDelete', 'datastore.databases.clone', 'datastore.databases.create', 'datastore.databases.createTagBinding', 'datastore.databases.delete', 'datastore.databases.deleteTagBinding', 'datastore.databases.export', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.import', 'datastore.databases.list', 'datastore.databases.listEffectiveTags', 'datastore.databases.listTagBindings', 'datastore.databases.update', 'datastore.entities.allocateIds', 'datastore.entities.create', 'datastore.entities.delete', 'datastore.entities.get', 'datastore.entities.list', 'datastore.entities.update', 'datastore.indexes.create', 'datastore.indexes.delete', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.indexes.update', 'datastore.insights.get', 'datastore.keyVisualizerScans.get', 'datastore.keyVisualizerScans.list', 'datastore.locations.get', 'datastore.locations.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.operations.cancel', 'datastore.operations.delete', 'datastore.operations.get', 'datastore.operations.list', 'datastore.statistics.get', 'datastore.statistics.list', 'datastore.userCreds.create', 'datastore.userCreds.delete', 'datastore.userCreds.get', 'datastore.userCreds.list', 'datastore.userCreds.update', 'errorreporting.groups.list', 'eventarc.channelConnections.create', 'eventarc.channelConnections.delete', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channelConnections.publish', 'eventarc.channelConnections.setIamPolicy', 'eventarc.channels.attach', 'eventarc.channels.create', 'eventarc.channels.delete', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.channels.publish', 'eventarc.channels.setIamPolicy', 'eventarc.channels.undelete', 'eventarc.channels.update', 'eventarc.enrollments.create', 'eventarc.enrollments.delete', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.enrollments.setIamPolicy', 'eventarc.enrollments.update', 'eventarc.events.receiveAuditLogWritten', 'eventarc.events.receiveEvent', 'eventarc.googleApiSources.create', 'eventarc.googleApiSources.delete', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleApiSources.setIamPolicy', 'eventarc.googleApiSources.update', 'eventarc.googleChannelConfigs.get', 'eventarc.googleChannelConfigs.update', 'eventarc.kafkaSources.create', 'eventarc.kafkaSources.delete', 'eventarc.kafkaSources.get', 'eventarc.kafkaSources.getIamPolicy', 'eventarc.kafkaSources.list', 'eventarc.kafkaSources.setIamPolicy', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.create', 'eventarc.messageBuses.delete', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.publish', 'eventarc.messageBuses.setIamPolicy', 'eventarc.messageBuses.update', 'eventarc.messageBuses.use', 'eventarc.multiProjectSources.collectGoogleApiEvents', 'eventarc.operations.cancel', 'eventarc.operations.delete', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.create', 'eventarc.pipelines.delete', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.pipelines.setIamPolicy', 'eventarc.pipelines.update', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.create', 'eventarc.triggers.delete', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'eventarc.triggers.setIamPolicy', 'eventarc.triggers.undelete', 'eventarc.triggers.update', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.billingPlans.update', 'firebase.clients.create', 'firebase.clients.delete', 'firebase.clients.get', 'firebase.clients.list', 'firebase.clients.undelete', 'firebase.clients.update', 'firebase.links.create', 'firebase.links.delete', 'firebase.links.list', 'firebase.links.update', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.playLinks.update', 'firebase.projects.delete', 'firebase.projects.get', 'firebase.projects.update', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.create', 'firebaseabt.experiments.delete', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.experiments.update', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsEdit', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.appAttestConfig.update', 'firebaseappcheck.appCheckTokens.verify', 'firebaseappcheck.automations.create', 'firebaseappcheck.automations.delete', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.automations.resume', 'firebaseappcheck.automations.suspend', 'firebaseappcheck.automations.update', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.debugTokens.update', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.deviceCheckConfig.update', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.playIntegrityConfig.update', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.update', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.recaptchaV3Config.update', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.resourcePolicies.update', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.safetyNetConfig.update', 'firebaseappcheck.services.get', 'firebaseappcheck.services.update', 'firebaseappdistro.groups.list', 'firebaseappdistro.groups.update', 'firebaseappdistro.releases.list', 'firebaseappdistro.releases.update', 'firebaseappdistro.testers.list', 'firebaseappdistro.testers.update', 'firebaseapphosting.backends.create', 'firebaseapphosting.backends.delete', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.delete', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.create', 'firebaseapphosting.domains.delete', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.domains.update', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.delete', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.delete', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.getHashConfig', 'firebaseauth.configs.getSecret', 'firebaseauth.configs.update', 'firebaseauth.users.create', 'firebaseauth.users.createSession', 'firebaseauth.users.delete', 'firebaseauth.users.get', 'firebaseauth.users.sendEmail', 'firebaseauth.users.update', 'firebasecrash.issues.update', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.config.update', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.issues.update', 'firebasecrashlytics.sessions.get', 'firebasedatabase.instances.create', 'firebasedatabase.instances.delete', 'firebasedatabase.instances.disable', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedatabase.instances.reenable', 'firebasedatabase.instances.undelete', 'firebasedatabase.instances.update', 'firebasedataconnect.connectorRevisions.delete', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.create', 'firebasedataconnect.connectors.delete', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.impersonateMutation', 'firebasedataconnect.connectors.impersonateQuery', 'firebasedataconnect.connectors.list', 'firebasedataconnect.connectors.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.cancel', 'firebasedataconnect.operations.delete', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.delete', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.create', 'firebasedataconnect.schemas.delete', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.schemas.update', 'firebasedataconnect.services.create', 'firebasedataconnect.services.delete', 'firebasedataconnect.services.executeGraphql', 'firebasedataconnect.services.executeGraphqlRead', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'firebasedataconnect.services.update', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.destinations.update', 'firebasedynamiclinks.domains.create', 'firebasedynamiclinks.domains.delete', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.domains.update', 'firebasedynamiclinks.links.create', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.links.update', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.create', 'firebaseextensions.configs.delete', 'firebaseextensions.configs.list', 'firebaseextensions.configs.update', 'firebaseextensionspublisher.extensions.create', 'firebaseextensionspublisher.extensions.delete', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'firebasehosting.sites.create', 'firebasehosting.sites.delete', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaseinappmessaging.campaigns.create', 'firebaseinappmessaging.campaigns.delete', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebaseinappmessaging.campaigns.update', 'firebasemessagingcampaigns.campaigns.create', 'firebasemessagingcampaigns.campaigns.delete', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebasemessagingcampaigns.campaigns.start', 'firebasemessagingcampaigns.campaigns.stop', 'firebasemessagingcampaigns.campaigns.update', 'firebaseml.models.create', 'firebaseml.models.delete', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.models.update', 'firebaseml.modelversions.create', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebaseml.modelversions.update', 'firebasenotifications.messages.create', 'firebasenotifications.messages.delete', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebasenotifications.messages.update', 'firebaseperformance.config.update', 'firebaseperformance.data.get', 'firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.getExecutable', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.delete', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebaserules.rulesets.test', 'firebasestorage.buckets.addFirebase', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.buckets.removeFirebase', 'firebasestorage.defaultBucket.create', 'firebasestorage.defaultBucket.delete', 'firebasestorage.defaultBucket.get', 'firebasevertexai.configs.get', 'firebasevertexai.configs.update', 'logging.logEntries.list', 'monitoring.timeSeries.create', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'orgpolicy.policy.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceInsights.update', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.cloudFunctionsPerformanceRecommendations.update', 'recommender.iamPolicyInsights.get', 'recommender.iamPolicyInsights.list', 'recommender.iamPolicyInsights.update', 'recommender.iamPolicyRecommendations.get', 'recommender.iamPolicyRecommendations.list', 'recommender.iamPolicyRecommendations.update', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostInsights.update', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceCostRecommendations.update', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityInsights.update', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServiceIdentityRecommendations.update', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceInsights.update', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServicePerformanceRecommendations.update', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityInsights.update', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'recommender.runServiceSecurityRecommendations.update', 'recommender.storageBucketSoftDeleteInsights.get', 'recommender.storageBucketSoftDeleteInsights.list', 'recommender.storageBucketSoftDeleteInsights.update', 'recommender.storageBucketSoftDeleteRecommendations.get', 'recommender.storageBucketSoftDeleteRecommendations.list', 'recommender.storageBucketSoftDeleteRecommendations.update', 'remotebuildexecution.blobs.get', 'resourcemanager.hierarchyNodes.listEffectiveTags', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.cancel', 'run.executions.delete', 'run.executions.get', 'run.executions.list', 'run.jobs.create', 'run.jobs.createTagBinding', 'run.jobs.delete', 'run.jobs.deleteTagBinding', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.jobs.run', 'run.jobs.runWithOverrides', 'run.jobs.setIamPolicy', 'run.jobs.update', 'run.locations.list', 'run.operations.delete', 'run.operations.get', 'run.operations.list', 'run.revisions.delete', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.invoke', 'run.routes.list', 'run.services.create', 'run.services.createTagBinding', 'run.services.delete', 'run.services.deleteTagBinding', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.services.setIamPolicy', 'run.services.update', 'run.tasks.get', 'run.tasks.list', 'run.workerpools.create', 'run.workerpools.delete', 'run.workerpools.get', 'run.workerpools.getIamPolicy', 'run.workerpools.list', 'run.workerpools.setIamPolicy', 'run.workerpools.update', 'runtimeconfig.configs.create', 'runtimeconfig.configs.delete', 'runtimeconfig.configs.get', 'runtimeconfig.configs.list', 'runtimeconfig.configs.update', 'runtimeconfig.operations.get', 'runtimeconfig.operations.list', 'runtimeconfig.variables.create', 'runtimeconfig.variables.delete', 'runtimeconfig.variables.get', 'runtimeconfig.variables.list', 'runtimeconfig.variables.update', 'runtimeconfig.variables.watch', 'runtimeconfig.waiters.create', 'runtimeconfig.waiters.delete', 'runtimeconfig.waiters.get', 'runtimeconfig.waiters.list', 'runtimeconfig.waiters.update', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.anywhereCaches.create', 'storage.anywhereCaches.disable', 'storage.anywhereCaches.get', 'storage.anywhereCaches.list', 'storage.anywhereCaches.pause', 'storage.anywhereCaches.resume', 'storage.anywhereCaches.update', 'storage.bucketOperations.cancel', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.createTagBinding', 'storage.buckets.delete', 'storage.buckets.deleteTagBinding', 'storage.buckets.enableObjectRetention', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.getIpFilter', 'storage.buckets.getObjectInsights', 'storage.buckets.list', 'storage.buckets.listEffectiveTags', 'storage.buckets.listTagBindings', 'storage.buckets.relocate', 'storage.buckets.restore', 'storage.buckets.setIamPolicy', 'storage.buckets.setIpFilter', 'storage.buckets.update', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.intelligenceConfigs.get', 'storage.intelligenceConfigs.update', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.getIamPolicy', 'storage.managedFolders.list', 'storage.managedFolders.setIamPolicy', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.move', 'storage.objects.overrideUnlockedRetention', 'storage.objects.restore', 'storage.objects.setIamPolicy', 'storage.objects.setRetention', 'storage.objects.update']
Copy Permissions
GA
roles/firebaseappcheck.viewer
Read-only access for Firebase App Check.
Firebase App Check Viewer
['firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.services.get']
Copy Permissions
GA
roles/firebaseappdistro.viewer
Read-only access to Firebase App Distribution resources.
Firebase App Distribution Viewer
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebaseappdistro.groups.list', 'firebaseappdistro.releases.list', 'firebaseappdistro.testers.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebasemods.serviceAgent
Grants Firebase Extensions API Service Account access to manage resources.
Firebase Extensions API Service Agent
['appengine.applications.get', 'artifactregistry.packages.delete', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.setIamPolicy', 'cloudtasks.locations.get', 'cloudtasks.locations.list', 'cloudtasks.queues.create', 'cloudtasks.queues.delete', 'cloudtasks.queues.get', 'cloudtasks.queues.getIamPolicy', 'cloudtasks.queues.list', 'cloudtasks.queues.pause', 'cloudtasks.queues.purge', 'cloudtasks.queues.resume', 'cloudtasks.queues.setIamPolicy', 'cloudtasks.queues.update', 'cloudtasks.tasks.create', 'cloudtasks.tasks.fullView', 'deploymentmanager.compositeTypes.create', 'deploymentmanager.compositeTypes.delete', 'deploymentmanager.compositeTypes.get', 'deploymentmanager.compositeTypes.list', 'deploymentmanager.compositeTypes.update', 'deploymentmanager.deployments.cancelPreview', 'deploymentmanager.deployments.create', 'deploymentmanager.deployments.delete', 'deploymentmanager.deployments.get', 'deploymentmanager.deployments.list', 'deploymentmanager.deployments.stop', 'deploymentmanager.deployments.update', 'deploymentmanager.manifests.get', 'deploymentmanager.manifests.list', 'deploymentmanager.operations.get', 'deploymentmanager.operations.list', 'deploymentmanager.resources.get', 'deploymentmanager.resources.list', 'deploymentmanager.typeProviders.create', 'deploymentmanager.typeProviders.delete', 'deploymentmanager.typeProviders.get', 'deploymentmanager.typeProviders.getType', 'deploymentmanager.typeProviders.list', 'deploymentmanager.typeProviders.listTypes', 'deploymentmanager.typeProviders.update', 'deploymentmanager.types.create', 'deploymentmanager.types.delete', 'deploymentmanager.types.get', 'deploymentmanager.types.list', 'deploymentmanager.types.update', 'eventarc.channels.create', 'eventarc.channels.delete', 'eventarc.channels.get', 'eventarc.channels.setIamPolicy', 'iam.serviceAccounts.actAs', 'iam.serviceAccounts.create', 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'resourcemanager.projects.updateLiens', 'run.services.getIamPolicy', 'run.services.setIamPolicy', 'serviceusage.quotas.get', 'serviceusage.services.enable', 'serviceusage.services.get', 'serviceusage.services.list']
Copy Permissions
GA
roles/firebase.managementServiceAgent
Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services.
Firebase Service Management Service Agent
['apikeys.keys.create', 'apikeys.keys.get', 'apikeys.keys.list', 'apikeys.keys.update', 'appengine.applications.create', 'appengine.applications.get', 'appengine.applications.update', 'appengine.operations.get', 'appengine.services.list', 'bigquery.datasets.create', 'bigquery.datasets.get', 'bigquery.datasets.setIamPolicy', 'bigquery.datasets.update', 'bigquery.transfers.get', 'bigquery.transfers.update', 'clientauthconfig.brands.create', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'clientauthconfig.brands.update', 'clientauthconfig.clients.create', 'clientauthconfig.clients.delete', 'clientauthconfig.clients.get', 'clientauthconfig.clients.getWithSecret', 'clientauthconfig.clients.list', 'clientauthconfig.clients.update', 'datastore.databases.create', 'datastore.databases.get', 'datastore.databases.list', 'datastore.databases.update', 'datastore.locations.get', 'datastore.locations.list', 'datastore.operations.get', 'datastore.operations.list', 'firebase.clients.create', 'firebase.clients.delete', 'firebase.clients.get', 'firebase.clients.undelete', 'firebase.clients.update', 'firebase.projects.delete', 'firebase.projects.get', 'firebase.projects.update', 'firebaseabt.experiments.delete', 'firebaseapphosting.domains.create', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.domains.update', 'firebaseauth.configs.create', 'firebaseauth.configs.get', 'firebaseauth.configs.update', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.services.create', 'firebasehosting.sites.create', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebasehosting.sites.update', 'firebaserules.releases.create', 'firebaserules.releases.delete', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.releases.update', 'firebaserules.rulesets.create', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebasestorage.defaultBucket.get', 'firebasevertexai.configs.get', 'firebasevertexai.configs.update', 'iam.roles.get', 'iam.serviceAccounts.create', 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'resourcemanager.organizations.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.setIamPolicy', 'resourcemanager.projects.update', 'servicemanagement.services.bind', 'serviceusage.services.enable', 'serviceusage.services.get', 'serviceusage.services.list', 'serviceusage.services.use', 'storage.bucketOperations.get', 'storage.bucketOperations.list', 'storage.buckets.create', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.list', 'storage.buckets.setIamPolicy', 'storage.buckets.update']
Copy Permissions
GA
roles/firebase.qualityViewer
Read access to Firebase Quality products and Analytics.
Firebase Quality Viewer
['apikeys.keys.get', 'apikeys.keys.list', 'cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappdistro.groups.list', 'firebaseappdistro.releases.list', 'firebaseappdistro.testers.list', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.sessions.get', 'firebaseextensions.configs.list', 'firebaseperformance.data.get', 'monitoring.timeSeries.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list']
Copy Permissions
GA
roles/firebaseappcheck.serviceAgent
Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.
Firebase App Check Service Agent
['recaptchaenterprise.assessments.annotate', 'recaptchaenterprise.assessments.create', 'serviceusage.services.use']
Copy Permissions
GA
roles/firebasestorage.serviceAgent
Access to Cloud Storage for Firebase through API and SDK.
Cloud Storage for Firebase Service Agent
['storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list', 'storage.objects.update']
Copy Permissions
GA
roles/firebaseapphosting.developer
Grants read & update access to Firebase App Hosting backend, builds, and releases resources, plus permission to invoke the backend, but doesn't allow for new backends to be created.
Firebase App Hosting Developer
['firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.delete', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.delete', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.delete', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebase.analyticsViewer
Read access to Google Analytics for Firebase.
Firebase Analytics Viewer
['cloudnotifications.activities.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseextensions.configs.list', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list']
Copy Permissions
GA
roles/firebase.viewer
Read-only access to Firebase products.
Firebase Viewer
['apikeys.keys.get', 'apikeys.keys.list', 'automl.annotationSpecs.get', 'automl.annotationSpecs.list', 'automl.annotations.list', 'automl.columnSpecs.get', 'automl.columnSpecs.list', 'automl.datasets.get', 'automl.datasets.list', 'automl.examples.get', 'automl.examples.list', 'automl.files.list', 'automl.humanAnnotationTasks.get', 'automl.humanAnnotationTasks.list', 'automl.locations.get', 'automl.locations.list', 'automl.modelEvaluations.get', 'automl.modelEvaluations.list', 'automl.models.get', 'automl.models.list', 'automl.operations.get', 'automl.operations.list', 'automl.tableSpecs.get', 'automl.tableSpecs.list', 'clientauthconfig.brands.get', 'clientauthconfig.brands.list', 'cloudasset.assets.searchAllResources', 'cloudbuild.builds.get', 'cloudbuild.builds.list', 'cloudbuild.locations.get', 'cloudbuild.locations.list', 'cloudbuild.operations.get', 'cloudbuild.operations.list', 'cloudconfig.configs.get', 'cloudfunctions.functions.get', 'cloudfunctions.functions.getIamPolicy', 'cloudfunctions.functions.list', 'cloudfunctions.locations.list', 'cloudfunctions.operations.get', 'cloudfunctions.operations.list', 'cloudnotifications.activities.list', 'cloudtestservice.environmentcatalog.get', 'cloudtestservice.matrices.get', 'cloudtoolresults.executions.get', 'cloudtoolresults.executions.list', 'cloudtoolresults.histories.get', 'cloudtoolresults.histories.list', 'cloudtoolresults.settings.get', 'cloudtoolresults.steps.get', 'cloudtoolresults.steps.list', 'datastore.backups.get', 'datastore.backups.list', 'datastore.databases.get', 'datastore.databases.getMetadata', 'datastore.databases.list', 'datastore.entities.get', 'datastore.entities.list', 'datastore.indexes.get', 'datastore.indexes.list', 'datastore.namespaces.get', 'datastore.namespaces.list', 'datastore.statistics.get', 'datastore.statistics.list', 'errorreporting.groups.list', 'eventarc.channelConnections.get', 'eventarc.channelConnections.getIamPolicy', 'eventarc.channelConnections.list', 'eventarc.channels.get', 'eventarc.channels.getIamPolicy', 'eventarc.channels.list', 'eventarc.enrollments.get', 'eventarc.enrollments.getIamPolicy', 'eventarc.enrollments.list', 'eventarc.googleApiSources.get', 'eventarc.googleApiSources.getIamPolicy', 'eventarc.googleApiSources.list', 'eventarc.googleChannelConfigs.get', 'eventarc.kafkaSources.get', 'eventarc.kafkaSources.getIamPolicy', 'eventarc.kafkaSources.list', 'eventarc.locations.get', 'eventarc.locations.list', 'eventarc.messageBuses.get', 'eventarc.messageBuses.getIamPolicy', 'eventarc.messageBuses.list', 'eventarc.messageBuses.use', 'eventarc.multiProjectSources.collectGoogleApiEvents', 'eventarc.operations.get', 'eventarc.operations.list', 'eventarc.pipelines.get', 'eventarc.pipelines.getIamPolicy', 'eventarc.pipelines.list', 'eventarc.providers.get', 'eventarc.providers.list', 'eventarc.triggers.get', 'eventarc.triggers.getIamPolicy', 'eventarc.triggers.list', 'fcmdata.deliverydata.list', 'firebase.billingPlans.get', 'firebase.clients.get', 'firebase.clients.list', 'firebase.links.list', 'firebase.playLinks.get', 'firebase.playLinks.list', 'firebase.projects.get', 'firebaseabt.experimentresults.get', 'firebaseabt.experiments.get', 'firebaseabt.experiments.list', 'firebaseabt.projectmetadata.get', 'firebaseanalytics.resources.googleAnalyticsReadAndAnalyze', 'firebaseappcheck.appAttestConfig.get', 'firebaseappcheck.automations.get', 'firebaseappcheck.automations.list', 'firebaseappcheck.debugTokens.get', 'firebaseappcheck.deviceCheckConfig.get', 'firebaseappcheck.playIntegrityConfig.get', 'firebaseappcheck.recaptchaEnterpriseConfig.get', 'firebaseappcheck.recaptchaV3Config.get', 'firebaseappcheck.resourcePolicies.get', 'firebaseappcheck.safetyNetConfig.get', 'firebaseappcheck.services.get', 'firebaseappdistro.groups.list', 'firebaseappdistro.releases.list', 'firebaseappdistro.testers.list', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.traffic.get', 'firebaseauth.configs.get', 'firebaseauth.users.get', 'firebasecrash.reports.get', 'firebasecrashlytics.config.get', 'firebasecrashlytics.data.get', 'firebasecrashlytics.issues.get', 'firebasecrashlytics.issues.list', 'firebasecrashlytics.sessions.get', 'firebasedatabase.instances.get', 'firebasedatabase.instances.list', 'firebasedataconnect.connectorRevisions.get', 'firebasedataconnect.connectorRevisions.list', 'firebasedataconnect.connectors.get', 'firebasedataconnect.connectors.list', 'firebasedataconnect.locations.get', 'firebasedataconnect.locations.list', 'firebasedataconnect.operations.get', 'firebasedataconnect.operations.list', 'firebasedataconnect.schemaRevisions.get', 'firebasedataconnect.schemaRevisions.list', 'firebasedataconnect.schemas.get', 'firebasedataconnect.schemas.list', 'firebasedataconnect.services.get', 'firebasedataconnect.services.introspectGraphql', 'firebasedataconnect.services.list', 'firebasedynamiclinks.destinations.list', 'firebasedynamiclinks.domains.get', 'firebasedynamiclinks.domains.list', 'firebasedynamiclinks.links.get', 'firebasedynamiclinks.links.list', 'firebasedynamiclinks.stats.get', 'firebaseextensions.configs.list', 'firebaseextensionspublisher.extensions.get', 'firebaseextensionspublisher.extensions.list', 'firebasehosting.sites.get', 'firebasehosting.sites.list', 'firebaseinappmessaging.campaigns.get', 'firebaseinappmessaging.campaigns.list', 'firebasemessagingcampaigns.campaigns.get', 'firebasemessagingcampaigns.campaigns.list', 'firebaseml.models.get', 'firebaseml.models.list', 'firebaseml.modelversions.get', 'firebaseml.modelversions.list', 'firebasenotifications.messages.get', 'firebasenotifications.messages.list', 'firebaseperformance.data.get', 'firebaserules.releases.get', 'firebaserules.releases.list', 'firebaserules.rulesets.get', 'firebaserules.rulesets.list', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.defaultBucket.get', 'firebasevertexai.configs.get', 'logging.logEntries.list', 'monitoring.timeSeries.list', 'oauthconfig.verification.get', 'recommender.cloudFunctionsPerformanceInsights.get', 'recommender.cloudFunctionsPerformanceInsights.list', 'recommender.cloudFunctionsPerformanceRecommendations.get', 'recommender.cloudFunctionsPerformanceRecommendations.list', 'recommender.locations.get', 'recommender.locations.list', 'recommender.runServiceCostInsights.get', 'recommender.runServiceCostInsights.list', 'recommender.runServiceCostRecommendations.get', 'recommender.runServiceCostRecommendations.list', 'recommender.runServiceIdentityInsights.get', 'recommender.runServiceIdentityInsights.list', 'recommender.runServiceIdentityRecommendations.get', 'recommender.runServiceIdentityRecommendations.list', 'recommender.runServicePerformanceInsights.get', 'recommender.runServicePerformanceInsights.list', 'recommender.runServicePerformanceRecommendations.get', 'recommender.runServicePerformanceRecommendations.list', 'recommender.runServiceSecurityInsights.get', 'recommender.runServiceSecurityInsights.list', 'recommender.runServiceSecurityRecommendations.get', 'recommender.runServiceSecurityRecommendations.list', 'remotebuildexecution.blobs.get', 'resourcemanager.projects.get', 'resourcemanager.projects.getIamPolicy', 'resourcemanager.projects.list', 'run.configurations.get', 'run.configurations.list', 'run.executions.get', 'run.executions.list', 'run.jobs.get', 'run.jobs.getIamPolicy', 'run.jobs.list', 'run.jobs.listEffectiveTags', 'run.jobs.listTagBindings', 'run.locations.list', 'run.operations.get', 'run.operations.list', 'run.revisions.get', 'run.revisions.list', 'run.routes.get', 'run.routes.list', 'run.services.get', 'run.services.getIamPolicy', 'run.services.list', 'run.services.listEffectiveTags', 'run.services.listTagBindings', 'run.tasks.get', 'run.tasks.list', 'run.workerpools.get', 'run.workerpools.getIamPolicy', 'run.workerpools.list', 'serviceusage.operations.get', 'serviceusage.quotas.get', 'serviceusage.services.get', 'serviceusage.services.list', 'storage.buckets.get', 'storage.buckets.getIamPolicy', 'storage.buckets.list', 'storage.objects.get', 'storage.objects.getIamPolicy', 'storage.objects.list']
Copy Permissions
GA
roles/firebasestorage.admin
Full management of Cloud Storage for Firebase.
Cloud Storage for Firebase Admin
['firebase.clients.get', 'firebase.clients.list', 'firebase.projects.get', 'firebasestorage.buckets.addFirebase', 'firebasestorage.buckets.get', 'firebasestorage.buckets.list', 'firebasestorage.buckets.removeFirebase', 'firebasestorage.defaultBucket.create', 'firebasestorage.defaultBucket.delete', 'firebasestorage.defaultBucket.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA