roles/firebaseapphosting.serviceAgent
Gives Firebase App Hosting access to resource for Building & Deploying Backends.
Firebase App Hosting Service Agent
['artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.repositories.create', 'artifactregistry.repositories.delete', 'artifactregistry.repositories.deleteArtifacts', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.update', 'cloudbuild.builds.create', 'cloudbuild.builds.get', 'cloudbuild.builds.update', 'cloudbuild.connections.get', 'cloudbuild.operations.get', 'cloudbuild.repositories.accessReadToken', 'cloudbuild.repositories.accessReadWriteToken', 'cloudbuild.repositories.get', 'developerconnect.connections.get', 'developerconnect.gitRepositoryLinks.fetchReadToken', 'developerconnect.gitRepositoryLinks.fetchReadWriteToken', 'developerconnect.gitRepositoryLinks.get', 'firebaseapphosting.backends.create', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.get', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'iam.serviceAccounts.actAs', 'run.operations.delete', 'run.operations.get', 'run.revisions.delete', 'run.revisions.get', 'run.routes.get', 'run.routes.invoke', 'run.services.create', 'run.services.delete', 'run.services.get', 'run.services.update', 'serviceusage.services.use']
Copy Permissions
GA
roles/firebaseapphosting.computeRunner
Contains the basic necessary permissions for building and running Apps on Firebase App Hosting. Gives access to get and update App Hosting builds, upload artifacts to Artifact Registry and Storage, write logs. Intended to be granted to the user-supplied App Hosting Compute service account.
Firebase App Hosting Compute Runner
['artifactregistry.aptartifacts.create', 'artifactregistry.attachments.create', 'artifactregistry.attachments.delete', 'artifactregistry.attachments.get', 'artifactregistry.attachments.list', 'artifactregistry.dockerimages.get', 'artifactregistry.dockerimages.list', 'artifactregistry.files.download', 'artifactregistry.files.get', 'artifactregistry.files.list', 'artifactregistry.files.update', 'artifactregistry.files.upload', 'artifactregistry.kfpartifacts.create', 'artifactregistry.locations.get', 'artifactregistry.locations.list', 'artifactregistry.mavenartifacts.get', 'artifactregistry.mavenartifacts.list', 'artifactregistry.npmpackages.get', 'artifactregistry.npmpackages.list', 'artifactregistry.packages.get', 'artifactregistry.packages.list', 'artifactregistry.packages.update', 'artifactregistry.projectsettings.get', 'artifactregistry.pythonpackages.get', 'artifactregistry.pythonpackages.list', 'artifactregistry.repositories.createOnPush', 'artifactregistry.repositories.downloadArtifacts', 'artifactregistry.repositories.get', 'artifactregistry.repositories.list', 'artifactregistry.repositories.listEffectiveTags', 'artifactregistry.repositories.listTagBindings', 'artifactregistry.repositories.readViaVirtualRepository', 'artifactregistry.repositories.uploadArtifacts', 'artifactregistry.rules.get', 'artifactregistry.rules.list', 'artifactregistry.tags.create', 'artifactregistry.tags.get', 'artifactregistry.tags.list', 'artifactregistry.tags.update', 'artifactregistry.versions.get', 'artifactregistry.versions.list', 'artifactregistry.yumartifacts.create', 'cloudtrace.traces.patch', 'developerconnect.connections.get', 'developerconnect.gitRepositoryLinks.fetchReadToken', 'developerconnect.gitRepositoryLinks.get', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.traffic.get', 'logging.logEntries.create', 'logging.logEntries.route', 'monitoring.metricDescriptors.create', 'monitoring.metricDescriptors.get', 'monitoring.metricDescriptors.list', 'monitoring.monitoredResourceDescriptors.get', 'monitoring.monitoredResourceDescriptors.list', 'monitoring.timeSeries.create', 'orgpolicy.policy.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list', 'storage.folders.create', 'storage.folders.delete', 'storage.folders.get', 'storage.folders.list', 'storage.folders.rename', 'storage.managedFolders.create', 'storage.managedFolders.delete', 'storage.managedFolders.get', 'storage.managedFolders.list', 'storage.multipartUploads.abort', 'storage.multipartUploads.create', 'storage.multipartUploads.list', 'storage.multipartUploads.listParts', 'storage.objects.create', 'storage.objects.delete', 'storage.objects.get', 'storage.objects.list', 'storage.objects.move', 'storage.objects.restore', 'storage.objects.setRetention', 'storage.objects.update', 'telemetry.metrics.write', 'telemetry.traces.write']
Copy Permissions
BETA
roles/firebaseapphosting.viewer
Grants readonly access to Firebase App Hosting resources, but not permission to invoke the backend. Intended for auditors, PMs, ect. Includes minimal viewer permissions for Firebase Console.
Firebase App Hosting Viewer
['firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.traffic.get', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseapphosting.admin
Full access to Firebase App Hosting API resources.
Firebase App Hosting Admin
['firebaseapphosting.backends.create', 'firebaseapphosting.backends.delete', 'firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.delete', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.create', 'firebaseapphosting.domains.delete', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.domains.update', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.delete', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.delete', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA
roles/firebaseapphosting.developer
Grants read & update access to Firebase App Hosting backend, builds, and releases resources, plus permission to invoke the backend, but doesn't allow for new backends to be created.
Firebase App Hosting Developer
['firebaseapphosting.backends.get', 'firebaseapphosting.backends.list', 'firebaseapphosting.backends.update', 'firebaseapphosting.builds.create', 'firebaseapphosting.builds.delete', 'firebaseapphosting.builds.get', 'firebaseapphosting.builds.list', 'firebaseapphosting.builds.update', 'firebaseapphosting.domains.get', 'firebaseapphosting.domains.list', 'firebaseapphosting.locations.get', 'firebaseapphosting.locations.list', 'firebaseapphosting.operations.cancel', 'firebaseapphosting.operations.delete', 'firebaseapphosting.operations.get', 'firebaseapphosting.operations.list', 'firebaseapphosting.rollouts.create', 'firebaseapphosting.rollouts.delete', 'firebaseapphosting.rollouts.get', 'firebaseapphosting.rollouts.list', 'firebaseapphosting.rollouts.update', 'firebaseapphosting.traffic.get', 'firebaseapphosting.traffic.update', 'resourcemanager.projects.get', 'resourcemanager.projects.list']
Copy Permissions
BETA