Firebase Remote Config roles and permissions

This page lists the IAM roles and permissions for Firebase Remote Config. To search through all roles and permissions, see the role and permission index.

Firebase Remote Config roles

Role Permissions

Role	Permissions
Firebase Remote Config Admin (`roles/cloudconfig.admin`) Full access to Firebase Remote Config resources.	`cloudconfig.*` `cloudconfig.configs.get` `cloudconfig.configs.update` `firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Infrastructure Manager Service Agent (`roles/cloudconfig.serviceAgent`) Gives Infrastructure Manager service agent access to managed resources Warning: Do not grant service agent roles to any principals except service agents.	`cloudbuild.builds.create` `cloudbuild.builds.get` `cloudbuild.builds.list` `cloudbuild.builds.update` `cloudbuild.workerpools.use` `iam.serviceAccounts.actAs` `iam.serviceAccounts.getAccessToken` `logging.logEntries.create` `logging.logEntries.route` `serviceusage.services.use` `storage.buckets.create` `storage.buckets.delete` `storage.buckets.get` `storage.buckets.list` `storage.buckets.update` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`
Firebase Remote Config Viewer (`roles/cloudconfig.viewer`) Read access to Firebase Remote Config resources.	`cloudconfig.configs.get` `firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `resourcemanager.projects.get` `resourcemanager.projects.list`

Firebase Remote Config Admin

(roles/cloudconfig.admin)

Full access to Firebase Remote Config resources.

cloudconfig.*

cloudconfig.configs.get
cloudconfig.configs.update

firebase.clients.get

firebase.clients.list

firebase.projects.get

resourcemanager.projects.get

resourcemanager.projects.list

Infrastructure Manager Service Agent

(roles/cloudconfig.serviceAgent)

Gives Infrastructure Manager service agent access to managed resources

cloudbuild.builds.create

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.builds.update

cloudbuild.workerpools.use

iam.serviceAccounts.actAs

iam.serviceAccounts.getAccessToken

logging.logEntries.create

logging.logEntries.route

serviceusage.services.use

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.list

storage.buckets.update

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Firebase Remote Config Viewer

(roles/cloudconfig.viewer)

Read access to Firebase Remote Config resources.

cloudconfig.configs.get

firebase.clients.get

firebase.clients.list

firebase.projects.get

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Remote Config permissions

Permission Included in roles

Permission	Included in roles
`cloudconfig.configs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Remote Config Admin (`roles/cloudconfig.admin`) Firebase Remote Config Viewer (`roles/cloudconfig.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`)
`cloudconfig.configs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Remote Config Admin (`roles/cloudconfig.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)