Firebase roles and permissions

This page lists the IAM roles and permissions for Firebase. To search through all roles and permissions, see the role and permission index.

Firebase roles

Role Permissions

(roles/firebase.admin)

Full access to Firebase products.

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.lookup

appengine.applications.get

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

automl.*

  • automl.annotationSpecs.create
  • automl.annotationSpecs.delete
  • automl.annotationSpecs.get
  • automl.annotationSpecs.list
  • automl.annotationSpecs.update
  • automl.annotations.approve
  • automl.annotations.create
  • automl.annotations.list
  • automl.annotations.manipulate
  • automl.annotations.reject
  • automl.columnSpecs.get
  • automl.columnSpecs.list
  • automl.columnSpecs.update
  • automl.datasets.create
  • automl.datasets.delete
  • automl.datasets.export
  • automl.datasets.get
  • automl.datasets.getIamPolicy
  • automl.datasets.import
  • automl.datasets.list
  • automl.datasets.setIamPolicy
  • automl.datasets.update
  • automl.examples.delete
  • automl.examples.get
  • automl.examples.list
  • automl.examples.update
  • automl.files.delete
  • automl.files.list
  • automl.humanAnnotationTasks.create
  • automl.humanAnnotationTasks.delete
  • automl.humanAnnotationTasks.get
  • automl.humanAnnotationTasks.list
  • automl.locations.get
  • automl.locations.getIamPolicy
  • automl.locations.list
  • automl.locations.setIamPolicy
  • automl.modelEvaluations.create
  • automl.modelEvaluations.get
  • automl.modelEvaluations.list
  • automl.models.create
  • automl.models.delete
  • automl.models.deploy
  • automl.models.export
  • automl.models.get
  • automl.models.getIamPolicy
  • automl.models.list
  • automl.models.predict
  • automl.models.setIamPolicy
  • automl.models.undeploy
  • automl.operations.cancel
  • automl.operations.delete
  • automl.operations.get
  • automl.operations.list
  • automl.tableSpecs.get
  • automl.tableSpecs.list
  • automl.tableSpecs.update

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.create

clientauthconfig.clients.delete

clientauthconfig.clients.get

clientauthconfig.clients.list

clientauthconfig.clients.update

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

  • cloudbuild.locations.get
  • cloudbuild.locations.list

cloudbuild.operations.*

  • cloudbuild.operations.get
  • cloudbuild.operations.list

cloudconfig.*

  • cloudconfig.configs.get
  • cloudconfig.configs.update

cloudfunctions.*

  • cloudfunctions.functions.call
  • cloudfunctions.functions.create
  • cloudfunctions.functions.delete
  • cloudfunctions.functions.generationUpgrade
  • cloudfunctions.functions.get
  • cloudfunctions.functions.getIamPolicy
  • cloudfunctions.functions.invoke
  • cloudfunctions.functions.list
  • cloudfunctions.functions.setIamPolicy
  • cloudfunctions.functions.sourceCodeGet
  • cloudfunctions.functions.sourceCodeSet
  • cloudfunctions.functions.update
  • cloudfunctions.locations.list
  • cloudfunctions.operations.get
  • cloudfunctions.operations.list

cloudkms.keyHandles.*

  • cloudkms.keyHandles.create
  • cloudkms.keyHandles.get
  • cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudmessaging.messages.create

cloudnotifications.activities.list

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.*

  • cloudtestservice.matrices.create
  • cloudtestservice.matrices.get
  • cloudtestservice.matrices.update

cloudtoolresults.*

  • cloudtoolresults.executions.create
  • cloudtoolresults.executions.get
  • cloudtoolresults.executions.list
  • cloudtoolresults.executions.update
  • cloudtoolresults.histories.create
  • cloudtoolresults.histories.get
  • cloudtoolresults.histories.list
  • cloudtoolresults.settings.create
  • cloudtoolresults.settings.get
  • cloudtoolresults.settings.update
  • cloudtoolresults.steps.create
  • cloudtoolresults.steps.get
  • cloudtoolresults.steps.list
  • cloudtoolresults.steps.update

datastore.*

  • datastore.backupSchedules.create
  • datastore.backupSchedules.delete
  • datastore.backupSchedules.get
  • datastore.backupSchedules.list
  • datastore.backupSchedules.update
  • datastore.backups.delete
  • datastore.backups.get
  • datastore.backups.list
  • datastore.backups.restoreDatabase
  • datastore.databases.bulkDelete
  • datastore.databases.create
  • datastore.databases.createTagBinding
  • datastore.databases.delete
  • datastore.databases.deleteTagBinding
  • datastore.databases.export
  • datastore.databases.get
  • datastore.databases.getMetadata
  • datastore.databases.import
  • datastore.databases.list
  • datastore.databases.listEffectiveTags
  • datastore.databases.listTagBindings
  • datastore.databases.update
  • datastore.entities.allocateIds
  • datastore.entities.create
  • datastore.entities.delete
  • datastore.entities.get
  • datastore.entities.list
  • datastore.entities.update
  • datastore.indexes.create
  • datastore.indexes.delete
  • datastore.indexes.get
  • datastore.indexes.list
  • datastore.indexes.update
  • datastore.insights.get
  • datastore.keyVisualizerScans.get
  • datastore.keyVisualizerScans.list
  • datastore.locations.get
  • datastore.locations.list
  • datastore.namespaces.get
  • datastore.namespaces.list
  • datastore.operations.cancel
  • datastore.operations.delete
  • datastore.operations.get
  • datastore.operations.list
  • datastore.statistics.get
  • datastore.statistics.list
  • datastore.userCreds.create
  • datastore.userCreds.delete
  • datastore.userCreds.get
  • datastore.userCreds.list
  • datastore.userCreds.update

errorreporting.groups.list

eventarc.*

  • eventarc.channelConnections.create
  • eventarc.channelConnections.delete
  • eventarc.channelConnections.get
  • eventarc.channelConnections.getIamPolicy
  • eventarc.channelConnections.list
  • eventarc.channelConnections.publish
  • eventarc.channelConnections.setIamPolicy
  • eventarc.channels.attach
  • eventarc.channels.create
  • eventarc.channels.delete
  • eventarc.channels.get
  • eventarc.channels.getIamPolicy
  • eventarc.channels.list
  • eventarc.channels.publish
  • eventarc.channels.setIamPolicy
  • eventarc.channels.undelete
  • eventarc.channels.update
  • eventarc.enrollments.create
  • eventarc.enrollments.delete
  • eventarc.enrollments.get
  • eventarc.enrollments.getIamPolicy
  • eventarc.enrollments.list
  • eventarc.enrollments.setIamPolicy
  • eventarc.enrollments.update
  • eventarc.events.receiveAuditLogWritten
  • eventarc.events.receiveEvent
  • eventarc.googleApiSources.create
  • eventarc.googleApiSources.delete
  • eventarc.googleApiSources.get
  • eventarc.googleApiSources.getIamPolicy
  • eventarc.googleApiSources.list
  • eventarc.googleApiSources.setIamPolicy
  • eventarc.googleApiSources.update
  • eventarc.googleChannelConfigs.get
  • eventarc.googleChannelConfigs.update
  • eventarc.kafkaSources.create
  • eventarc.kafkaSources.delete
  • eventarc.kafkaSources.get
  • eventarc.kafkaSources.getIamPolicy
  • eventarc.kafkaSources.list
  • eventarc.kafkaSources.setIamPolicy
  • eventarc.locations.get
  • eventarc.locations.list
  • eventarc.messageBuses.create
  • eventarc.messageBuses.delete
  • eventarc.messageBuses.get
  • eventarc.messageBuses.getIamPolicy
  • eventarc.messageBuses.list
  • eventarc.messageBuses.publish
  • eventarc.messageBuses.setIamPolicy
  • eventarc.messageBuses.update
  • eventarc.messageBuses.use
  • eventarc.operations.cancel
  • eventarc.operations.delete
  • eventarc.operations.get
  • eventarc.operations.list
  • eventarc.pipelines.create
  • eventarc.pipelines.delete
  • eventarc.pipelines.get
  • eventarc.pipelines.getIamPolicy
  • eventarc.pipelines.list
  • eventarc.pipelines.setIamPolicy
  • eventarc.pipelines.update
  • eventarc.providers.get
  • eventarc.providers.list
  • eventarc.triggers.create
  • eventarc.triggers.delete
  • eventarc.triggers.get
  • eventarc.triggers.getIamPolicy
  • eventarc.triggers.list
  • eventarc.triggers.setIamPolicy
  • eventarc.triggers.undelete
  • eventarc.triggers.update

fcmdata.deliverydata.list

firebase.*

  • firebase.billingPlans.get
  • firebase.billingPlans.update
  • firebase.clients.create
  • firebase.clients.delete
  • firebase.clients.get
  • firebase.clients.list
  • firebase.clients.undelete
  • firebase.clients.update
  • firebase.links.create
  • firebase.links.delete
  • firebase.links.list
  • firebase.links.update
  • firebase.playLinks.get
  • firebase.playLinks.list
  • firebase.playLinks.update
  • firebase.projects.delete
  • firebase.projects.get
  • firebase.projects.update

firebaseabt.*

  • firebaseabt.experimentresults.get
  • firebaseabt.experiments.create
  • firebaseabt.experiments.delete
  • firebaseabt.experiments.get
  • firebaseabt.experiments.list
  • firebaseabt.experiments.update
  • firebaseabt.projectmetadata.get

firebaseanalytics.*

  • firebaseanalytics.resources.googleAnalyticsEdit
  • firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.*

  • firebaseappcheck.appAttestConfig.get
  • firebaseappcheck.appAttestConfig.update
  • firebaseappcheck.appCheckTokens.verify
  • firebaseappcheck.debugTokens.get
  • firebaseappcheck.debugTokens.update
  • firebaseappcheck.deviceCheckConfig.get
  • firebaseappcheck.deviceCheckConfig.update
  • firebaseappcheck.playIntegrityConfig.get
  • firebaseappcheck.playIntegrityConfig.update
  • firebaseappcheck.recaptchaEnterpriseConfig.get
  • firebaseappcheck.recaptchaEnterpriseConfig.update
  • firebaseappcheck.recaptchaV3Config.get
  • firebaseappcheck.recaptchaV3Config.update
  • firebaseappcheck.resourcePolicies.get
  • firebaseappcheck.resourcePolicies.update
  • firebaseappcheck.safetyNetConfig.get
  • firebaseappcheck.safetyNetConfig.update
  • firebaseappcheck.services.get
  • firebaseappcheck.services.update

firebaseappdistro.*

  • firebaseappdistro.groups.list
  • firebaseappdistro.groups.update
  • firebaseappdistro.releases.list
  • firebaseappdistro.releases.update
  • firebaseappdistro.testers.list
  • firebaseappdistro.testers.update

firebaseauth.*

  • firebaseauth.configs.create
  • firebaseauth.configs.get
  • firebaseauth.configs.getHashConfig
  • firebaseauth.configs.getSecret
  • firebaseauth.configs.update
  • firebaseauth.users.create
  • firebaseauth.users.createSession
  • firebaseauth.users.delete
  • firebaseauth.users.get
  • firebaseauth.users.sendEmail
  • firebaseauth.users.update

firebasecrash.*

  • firebasecrash.issues.update
  • firebasecrash.reports.get

firebasecrashlytics.*

  • firebasecrashlytics.config.get
  • firebasecrashlytics.config.update
  • firebasecrashlytics.data.get
  • firebasecrashlytics.issues.get
  • firebasecrashlytics.issues.list
  • firebasecrashlytics.issues.update
  • firebasecrashlytics.sessions.get

firebasedatabase.*

  • firebasedatabase.instances.create
  • firebasedatabase.instances.delete
  • firebasedatabase.instances.disable
  • firebasedatabase.instances.get
  • firebasedatabase.instances.list
  • firebasedatabase.instances.reenable
  • firebasedatabase.instances.undelete
  • firebasedatabase.instances.update

firebasedataconnect.*

  • firebasedataconnect.connectorRevisions.delete
  • firebasedataconnect.connectorRevisions.get
  • firebasedataconnect.connectorRevisions.list
  • firebasedataconnect.connectors.create
  • firebasedataconnect.connectors.delete
  • firebasedataconnect.connectors.get
  • firebasedataconnect.connectors.list
  • firebasedataconnect.connectors.update
  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list
  • firebasedataconnect.operations.cancel
  • firebasedataconnect.operations.delete
  • firebasedataconnect.operations.get
  • firebasedataconnect.operations.list
  • firebasedataconnect.schemaRevisions.delete
  • firebasedataconnect.schemaRevisions.get
  • firebasedataconnect.schemaRevisions.list
  • firebasedataconnect.schemas.create
  • firebasedataconnect.schemas.delete
  • firebasedataconnect.schemas.get
  • firebasedataconnect.schemas.list
  • firebasedataconnect.schemas.update
  • firebasedataconnect.services.create
  • firebasedataconnect.services.delete
  • firebasedataconnect.services.executeGraphql
  • firebasedataconnect.services.executeGraphqlRead
  • firebasedataconnect.services.get
  • firebasedataconnect.services.list
  • firebasedataconnect.services.update

firebasedynamiclinks.*

  • firebasedynamiclinks.destinations.list
  • firebasedynamiclinks.destinations.update
  • firebasedynamiclinks.domains.create
  • firebasedynamiclinks.domains.delete
  • firebasedynamiclinks.domains.get
  • firebasedynamiclinks.domains.list
  • firebasedynamiclinks.domains.update
  • firebasedynamiclinks.links.create
  • firebasedynamiclinks.links.get
  • firebasedynamiclinks.links.list
  • firebasedynamiclinks.links.update
  • firebasedynamiclinks.stats.get

firebaseextensions.*

  • firebaseextensions.configs.create
  • firebaseextensions.configs.delete
  • firebaseextensions.configs.list
  • firebaseextensions.configs.update

firebaseextensionspublisher.*

  • firebaseextensionspublisher.extensions.create
  • firebaseextensionspublisher.extensions.delete
  • firebaseextensionspublisher.extensions.get
  • firebaseextensionspublisher.extensions.list

firebasehosting.*

  • firebasehosting.sites.create
  • firebasehosting.sites.delete
  • firebasehosting.sites.get
  • firebasehosting.sites.list
  • firebasehosting.sites.update

firebaseinappmessaging.*

  • firebaseinappmessaging.campaigns.create
  • firebaseinappmessaging.campaigns.delete
  • firebaseinappmessaging.campaigns.get
  • firebaseinappmessaging.campaigns.list
  • firebaseinappmessaging.campaigns.update

firebasemessagingcampaigns.*

  • firebasemessagingcampaigns.campaigns.create
  • firebasemessagingcampaigns.campaigns.delete
  • firebasemessagingcampaigns.campaigns.get
  • firebasemessagingcampaigns.campaigns.list
  • firebasemessagingcampaigns.campaigns.start
  • firebasemessagingcampaigns.campaigns.stop
  • firebasemessagingcampaigns.campaigns.update

firebaseml.*

  • firebaseml.models.create
  • firebaseml.models.delete
  • firebaseml.models.get
  • firebaseml.models.list
  • firebaseml.models.update
  • firebaseml.modelversions.create
  • firebaseml.modelversions.get
  • firebaseml.modelversions.list
  • firebaseml.modelversions.update

firebasenotifications.*

  • firebasenotifications.messages.create
  • firebasenotifications.messages.delete
  • firebasenotifications.messages.get
  • firebasenotifications.messages.list
  • firebasenotifications.messages.update

firebaseperformance.*

  • firebaseperformance.config.update
  • firebaseperformance.data.get

firebaserules.*

  • firebaserules.releases.create
  • firebaserules.releases.delete
  • firebaserules.releases.get
  • firebaserules.releases.getExecutable
  • firebaserules.releases.list
  • firebaserules.releases.update
  • firebaserules.rulesets.create
  • firebaserules.rulesets.delete
  • firebaserules.rulesets.get
  • firebaserules.rulesets.list
  • firebaserules.rulesets.test

firebasestorage.*

  • firebasestorage.buckets.addFirebase
  • firebasestorage.buckets.get
  • firebasestorage.buckets.list
  • firebasestorage.buckets.removeFirebase
  • firebasestorage.defaultBucket.create
  • firebasestorage.defaultBucket.delete
  • firebasestorage.defaultBucket.get

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

orgpolicy.policy.get

recommender.cloudFunctionsPerformanceInsights.*

  • recommender.cloudFunctionsPerformanceInsights.get
  • recommender.cloudFunctionsPerformanceInsights.list
  • recommender.cloudFunctionsPerformanceInsights.update

recommender.cloudFunctionsPerformanceRecommendations.*

  • recommender.cloudFunctionsPerformanceRecommendations.get
  • recommender.cloudFunctionsPerformanceRecommendations.list
  • recommender.cloudFunctionsPerformanceRecommendations.update

recommender.iamPolicyInsights.*

  • recommender.iamPolicyInsights.get
  • recommender.iamPolicyInsights.list
  • recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

  • recommender.iamPolicyRecommendations.get
  • recommender.iamPolicyRecommendations.list
  • recommender.iamPolicyRecommendations.update

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

recommender.runServiceCostInsights.*

  • recommender.runServiceCostInsights.get
  • recommender.runServiceCostInsights.list
  • recommender.runServiceCostInsights.update

recommender.runServiceCostRecommendations.*

  • recommender.runServiceCostRecommendations.get
  • recommender.runServiceCostRecommendations.list
  • recommender.runServiceCostRecommendations.update

recommender.runServiceIdentityInsights.*

  • recommender.runServiceIdentityInsights.get
  • recommender.runServiceIdentityInsights.list
  • recommender.runServiceIdentityInsights.update

recommender.runServiceIdentityRecommendations.*

  • recommender.runServiceIdentityRecommendations.get
  • recommender.runServiceIdentityRecommendations.list
  • recommender.runServiceIdentityRecommendations.update

recommender.runServicePerformanceInsights.*

  • recommender.runServicePerformanceInsights.get
  • recommender.runServicePerformanceInsights.list
  • recommender.runServicePerformanceInsights.update

recommender.runServicePerformanceRecommendations.*

  • recommender.runServicePerformanceRecommendations.get
  • recommender.runServicePerformanceRecommendations.list
  • recommender.runServicePerformanceRecommendations.update

recommender.runServiceSecurityInsights.*

  • recommender.runServiceSecurityInsights.get
  • recommender.runServiceSecurityInsights.list
  • recommender.runServiceSecurityInsights.update

recommender.runServiceSecurityRecommendations.*

  • recommender.runServiceSecurityRecommendations.get
  • recommender.runServiceSecurityRecommendations.list
  • recommender.runServiceSecurityRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

  • recommender.storageBucketSoftDeleteInsights.get
  • recommender.storageBucketSoftDeleteInsights.list
  • recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

  • recommender.storageBucketSoftDeleteRecommendations.get
  • recommender.storageBucketSoftDeleteRecommendations.list
  • recommender.storageBucketSoftDeleteRecommendations.update

remotebuildexecution.blobs.get

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.*

  • run.configurations.get
  • run.configurations.list
  • run.executions.cancel
  • run.executions.delete
  • run.executions.get
  • run.executions.list
  • run.jobs.create
  • run.jobs.createTagBinding
  • run.jobs.delete
  • run.jobs.deleteTagBinding
  • run.jobs.get
  • run.jobs.getIamPolicy
  • run.jobs.list
  • run.jobs.listEffectiveTags
  • run.jobs.listTagBindings
  • run.jobs.run
  • run.jobs.runWithOverrides
  • run.jobs.setIamPolicy
  • run.jobs.update
  • run.locations.list
  • run.operations.delete
  • run.operations.get
  • run.operations.list
  • run.revisions.delete
  • run.revisions.get
  • run.revisions.list
  • run.routes.get
  • run.routes.invoke
  • run.routes.list
  • run.services.create
  • run.services.createTagBinding
  • run.services.delete
  • run.services.deleteTagBinding
  • run.services.get
  • run.services.getIamPolicy
  • run.services.list
  • run.services.listEffectiveTags
  • run.services.listTagBindings
  • run.services.setIamPolicy
  • run.services.update
  • run.tasks.get
  • run.tasks.list

runtimeconfig.configs.create

runtimeconfig.configs.delete

runtimeconfig.configs.get

runtimeconfig.configs.list

runtimeconfig.configs.update

runtimeconfig.operations.*

  • runtimeconfig.operations.get
  • runtimeconfig.operations.list

runtimeconfig.variables.create

runtimeconfig.variables.delete

runtimeconfig.variables.get

runtimeconfig.variables.list

runtimeconfig.variables.update

runtimeconfig.variables.watch

runtimeconfig.waiters.create

runtimeconfig.waiters.delete

runtimeconfig.waiters.get

runtimeconfig.waiters.list

runtimeconfig.waiters.update

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

storage.anywhereCaches.*

  • storage.anywhereCaches.create
  • storage.anywhereCaches.disable
  • storage.anywhereCaches.get
  • storage.anywhereCaches.list
  • storage.anywhereCaches.pause
  • storage.anywhereCaches.resume
  • storage.anywhereCaches.update

storage.bucketOperations.*

  • storage.bucketOperations.cancel
  • storage.bucketOperations.get
  • storage.bucketOperations.list

storage.buckets.*

  • storage.buckets.create
  • storage.buckets.createTagBinding
  • storage.buckets.delete
  • storage.buckets.deleteTagBinding
  • storage.buckets.enableObjectRetention
  • storage.buckets.get
  • storage.buckets.getIamPolicy
  • storage.buckets.getIpFilter
  • storage.buckets.getObjectInsights
  • storage.buckets.list
  • storage.buckets.listEffectiveTags
  • storage.buckets.listTagBindings
  • storage.buckets.relocate
  • storage.buckets.restore
  • storage.buckets.setIamPolicy
  • storage.buckets.setIpFilter
  • storage.buckets.update

storage.folders.*

  • storage.folders.create
  • storage.folders.delete
  • storage.folders.get
  • storage.folders.list
  • storage.folders.rename

storage.intelligenceConfigs.*

  • storage.intelligenceConfigs.get
  • storage.intelligenceConfigs.update

storage.managedFolders.*

  • storage.managedFolders.create
  • storage.managedFolders.delete
  • storage.managedFolders.get
  • storage.managedFolders.getIamPolicy
  • storage.managedFolders.list
  • storage.managedFolders.setIamPolicy

storage.multipartUploads.*

  • storage.multipartUploads.abort
  • storage.multipartUploads.create
  • storage.multipartUploads.list
  • storage.multipartUploads.listParts

storage.objects.*

  • storage.objects.create
  • storage.objects.delete
  • storage.objects.get
  • storage.objects.getIamPolicy
  • storage.objects.list
  • storage.objects.move
  • storage.objects.overrideUnlockedRetention
  • storage.objects.restore
  • storage.objects.setIamPolicy
  • storage.objects.setRetention
  • storage.objects.update

(roles/firebase.analyticsAdmin)

Full access to Google Analytics for Firebase.

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

  • firebaseanalytics.resources.googleAnalyticsEdit
  • firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseextensions.configs.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

(roles/firebase.analyticsViewer)

Read access to Google Analytics for Firebase.

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseextensions.configs.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

(roles/firebase.appDistributionSdkServiceAgent)

Read and write access to Firebase App Distribution with the Admin SDK

firebaseappdistro.*

  • firebaseappdistro.groups.list
  • firebaseappdistro.groups.update
  • firebaseappdistro.releases.list
  • firebaseappdistro.releases.update
  • firebaseappdistro.testers.list
  • firebaseappdistro.testers.update

(roles/firebase.developAdmin)

Full access to Firebase Develop products and Analytics.

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.lookup

appengine.applications.get

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

automl.*

  • automl.annotationSpecs.create
  • automl.annotationSpecs.delete
  • automl.annotationSpecs.get
  • automl.annotationSpecs.list
  • automl.annotationSpecs.update
  • automl.annotations.approve
  • automl.annotations.create
  • automl.annotations.list
  • automl.annotations.manipulate
  • automl.annotations.reject
  • automl.columnSpecs.get
  • automl.columnSpecs.list
  • automl.columnSpecs.update
  • automl.datasets.create
  • automl.datasets.delete
  • automl.datasets.export
  • automl.datasets.get
  • automl.datasets.getIamPolicy
  • automl.datasets.import
  • automl.datasets.list
  • automl.datasets.setIamPolicy
  • automl.datasets.update
  • automl.examples.delete
  • automl.examples.get
  • automl.examples.list
  • automl.examples.update
  • automl.files.delete
  • automl.files.list
  • automl.humanAnnotationTasks.create
  • automl.humanAnnotationTasks.delete
  • automl.humanAnnotationTasks.get
  • automl.humanAnnotationTasks.list
  • automl.locations.get
  • automl.locations.getIamPolicy
  • automl.locations.list
  • automl.locations.setIamPolicy
  • automl.modelEvaluations.create
  • automl.modelEvaluations.get
  • automl.modelEvaluations.list
  • automl.models.create
  • automl.models.delete
  • automl.models.deploy
  • automl.models.export
  • automl.models.get
  • automl.models.getIamPolicy
  • automl.models.list
  • automl.models.predict
  • automl.models.setIamPolicy
  • automl.models.undeploy
  • automl.operations.cancel
  • automl.operations.delete
  • automl.operations.get
  • automl.operations.list
  • automl.tableSpecs.get
  • automl.tableSpecs.list
  • automl.tableSpecs.update

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.get

clientauthconfig.clients.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

  • cloudbuild.locations.get
  • cloudbuild.locations.list

cloudbuild.operations.*

  • cloudbuild.operations.get
  • cloudbuild.operations.list

cloudfunctions.*

  • cloudfunctions.functions.call
  • cloudfunctions.functions.create
  • cloudfunctions.functions.delete
  • cloudfunctions.functions.generationUpgrade
  • cloudfunctions.functions.get
  • cloudfunctions.functions.getIamPolicy
  • cloudfunctions.functions.invoke
  • cloudfunctions.functions.list
  • cloudfunctions.functions.setIamPolicy
  • cloudfunctions.functions.sourceCodeGet
  • cloudfunctions.functions.sourceCodeSet
  • cloudfunctions.functions.update
  • cloudfunctions.locations.list
  • cloudfunctions.operations.get
  • cloudfunctions.operations.list

cloudkms.keyHandles.*

  • cloudkms.keyHandles.create
  • cloudkms.keyHandles.get
  • cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudnotifications.activities.list

datastore.*

  • datastore.backupSchedules.create
  • datastore.backupSchedules.delete
  • datastore.backupSchedules.get
  • datastore.backupSchedules.list
  • datastore.backupSchedules.update
  • datastore.backups.delete
  • datastore.backups.get
  • datastore.backups.list
  • datastore.backups.restoreDatabase
  • datastore.databases.bulkDelete
  • datastore.databases.create
  • datastore.databases.createTagBinding
  • datastore.databases.delete
  • datastore.databases.deleteTagBinding
  • datastore.databases.export
  • datastore.databases.get
  • datastore.databases.getMetadata
  • datastore.databases.import
  • datastore.databases.list
  • datastore.databases.listEffectiveTags
  • datastore.databases.listTagBindings
  • datastore.databases.update
  • datastore.entities.allocateIds
  • datastore.entities.create
  • datastore.entities.delete
  • datastore.entities.get
  • datastore.entities.list
  • datastore.entities.update
  • datastore.indexes.create
  • datastore.indexes.delete
  • datastore.indexes.get
  • datastore.indexes.list
  • datastore.indexes.update
  • datastore.insights.get
  • datastore.keyVisualizerScans.get
  • datastore.keyVisualizerScans.list
  • datastore.locations.get
  • datastore.locations.list
  • datastore.namespaces.get
  • datastore.namespaces.list
  • datastore.operations.cancel
  • datastore.operations.delete
  • datastore.operations.get
  • datastore.operations.list
  • datastore.statistics.get
  • datastore.statistics.list
  • datastore.userCreds.create
  • datastore.userCreds.delete
  • datastore.userCreds.get
  • datastore.userCreds.list
  • datastore.userCreds.update

errorreporting.groups.list

eventarc.*

  • eventarc.channelConnections.create
  • eventarc.channelConnections.delete
  • eventarc.channelConnections.get
  • eventarc.channelConnections.getIamPolicy
  • eventarc.channelConnections.list
  • eventarc.channelConnections.publish
  • eventarc.channelConnections.setIamPolicy
  • eventarc.channels.attach
  • eventarc.channels.create
  • eventarc.channels.delete
  • eventarc.channels.get
  • eventarc.channels.getIamPolicy
  • eventarc.channels.list
  • eventarc.channels.publish
  • eventarc.channels.setIamPolicy
  • eventarc.channels.undelete
  • eventarc.channels.update
  • eventarc.enrollments.create
  • eventarc.enrollments.delete
  • eventarc.enrollments.get
  • eventarc.enrollments.getIamPolicy
  • eventarc.enrollments.list
  • eventarc.enrollments.setIamPolicy
  • eventarc.enrollments.update
  • eventarc.events.receiveAuditLogWritten
  • eventarc.events.receiveEvent
  • eventarc.googleApiSources.create
  • eventarc.googleApiSources.delete
  • eventarc.googleApiSources.get
  • eventarc.googleApiSources.getIamPolicy
  • eventarc.googleApiSources.list
  • eventarc.googleApiSources.setIamPolicy
  • eventarc.googleApiSources.update
  • eventarc.googleChannelConfigs.get
  • eventarc.googleChannelConfigs.update
  • eventarc.kafkaSources.create
  • eventarc.kafkaSources.delete
  • eventarc.kafkaSources.get
  • eventarc.kafkaSources.getIamPolicy
  • eventarc.kafkaSources.list
  • eventarc.kafkaSources.setIamPolicy
  • eventarc.locations.get
  • eventarc.locations.list
  • eventarc.messageBuses.create
  • eventarc.messageBuses.delete
  • eventarc.messageBuses.get
  • eventarc.messageBuses.getIamPolicy
  • eventarc.messageBuses.list
  • eventarc.messageBuses.publish
  • eventarc.messageBuses.setIamPolicy
  • eventarc.messageBuses.update
  • eventarc.messageBuses.use
  • eventarc.operations.cancel
  • eventarc.operations.delete
  • eventarc.operations.get
  • eventarc.operations.list
  • eventarc.pipelines.create
  • eventarc.pipelines.delete
  • eventarc.pipelines.get
  • eventarc.pipelines.getIamPolicy
  • eventarc.pipelines.list
  • eventarc.pipelines.setIamPolicy
  • eventarc.pipelines.update
  • eventarc.providers.get
  • eventarc.providers.list
  • eventarc.triggers.create
  • eventarc.triggers.delete
  • eventarc.triggers.get
  • eventarc.triggers.getIamPolicy
  • eventarc.triggers.list
  • eventarc.triggers.setIamPolicy
  • eventarc.triggers.undelete
  • eventarc.triggers.update

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

  • firebaseanalytics.resources.googleAnalyticsEdit
  • firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.*

  • firebaseappcheck.appAttestConfig.get
  • firebaseappcheck.appAttestConfig.update
  • firebaseappcheck.appCheckTokens.verify
  • firebaseappcheck.debugTokens.get
  • firebaseappcheck.debugTokens.update
  • firebaseappcheck.deviceCheckConfig.get
  • firebaseappcheck.deviceCheckConfig.update
  • firebaseappcheck.playIntegrityConfig.get
  • firebaseappcheck.playIntegrityConfig.update
  • firebaseappcheck.recaptchaEnterpriseConfig.get
  • firebaseappcheck.recaptchaEnterpriseConfig.update
  • firebaseappcheck.recaptchaV3Config.get
  • firebaseappcheck.recaptchaV3Config.update
  • firebaseappcheck.resourcePolicies.get
  • firebaseappcheck.resourcePolicies.update
  • firebaseappcheck.safetyNetConfig.get
  • firebaseappcheck.safetyNetConfig.update
  • firebaseappcheck.services.get
  • firebaseappcheck.services.update

firebaseauth.*

  • firebaseauth.configs.create
  • firebaseauth.configs.get
  • firebaseauth.configs.getHashConfig
  • firebaseauth.configs.getSecret
  • firebaseauth.configs.update
  • firebaseauth.users.create
  • firebaseauth.users.createSession
  • firebaseauth.users.delete
  • firebaseauth.users.get
  • firebaseauth.users.sendEmail
  • firebaseauth.users.update

firebasedatabase.*

  • firebasedatabase.instances.create
  • firebasedatabase.instances.delete
  • firebasedatabase.instances.disable
  • firebasedatabase.instances.get
  • firebasedatabase.instances.list
  • firebasedatabase.instances.reenable
  • firebasedatabase.instances.undelete
  • firebasedatabase.instances.update

firebasedataconnect.*

  • firebasedataconnect.connectorRevisions.delete
  • firebasedataconnect.connectorRevisions.get
  • firebasedataconnect.connectorRevisions.list
  • firebasedataconnect.connectors.create
  • firebasedataconnect.connectors.delete
  • firebasedataconnect.connectors.get
  • firebasedataconnect.connectors.list
  • firebasedataconnect.connectors.update
  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list
  • firebasedataconnect.operations.cancel
  • firebasedataconnect.operations.delete
  • firebasedataconnect.operations.get
  • firebasedataconnect.operations.list
  • firebasedataconnect.schemaRevisions.delete
  • firebasedataconnect.schemaRevisions.get
  • firebasedataconnect.schemaRevisions.list
  • firebasedataconnect.schemas.create
  • firebasedataconnect.schemas.delete
  • firebasedataconnect.schemas.get
  • firebasedataconnect.schemas.list
  • firebasedataconnect.schemas.update
  • firebasedataconnect.services.create
  • firebasedataconnect.services.delete
  • firebasedataconnect.services.executeGraphql
  • firebasedataconnect.services.executeGraphqlRead
  • firebasedataconnect.services.get
  • firebasedataconnect.services.list
  • firebasedataconnect.services.update

firebaseextensions.configs.list

firebasehosting.*

  • firebasehosting.sites.create
  • firebasehosting.sites.delete
  • firebasehosting.sites.get
  • firebasehosting.sites.list
  • firebasehosting.sites.update

firebaseml.*

  • firebaseml.models.create
  • firebaseml.models.delete
  • firebaseml.models.get
  • firebaseml.models.list
  • firebaseml.models.update
  • firebaseml.modelversions.create
  • firebaseml.modelversions.get
  • firebaseml.modelversions.list
  • firebaseml.modelversions.update

firebaserules.*

  • firebaserules.releases.create
  • firebaserules.releases.delete
  • firebaserules.releases.get
  • firebaserules.releases.getExecutable
  • firebaserules.releases.list
  • firebaserules.releases.update
  • firebaserules.rulesets.create
  • firebaserules.rulesets.delete
  • firebaserules.rulesets.get
  • firebaserules.rulesets.list
  • firebaserules.rulesets.test

firebasestorage.*

  • firebasestorage.buckets.addFirebase
  • firebasestorage.buckets.get
  • firebasestorage.buckets.list
  • firebasestorage.buckets.removeFirebase
  • firebasestorage.defaultBucket.create
  • firebasestorage.defaultBucket.delete
  • firebasestorage.defaultBucket.get

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

orgpolicy.policy.get

recommender.cloudFunctionsPerformanceInsights.*

  • recommender.cloudFunctionsPerformanceInsights.get
  • recommender.cloudFunctionsPerformanceInsights.list
  • recommender.cloudFunctionsPerformanceInsights.update

recommender.cloudFunctionsPerformanceRecommendations.*

  • recommender.cloudFunctionsPerformanceRecommendations.get
  • recommender.cloudFunctionsPerformanceRecommendations.list
  • recommender.cloudFunctionsPerformanceRecommendations.update

recommender.iamPolicyInsights.*

  • recommender.iamPolicyInsights.get
  • recommender.iamPolicyInsights.list
  • recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

  • recommender.iamPolicyRecommendations.get
  • recommender.iamPolicyRecommendations.list
  • recommender.iamPolicyRecommendations.update

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

recommender.runServiceCostInsights.*

  • recommender.runServiceCostInsights.get
  • recommender.runServiceCostInsights.list
  • recommender.runServiceCostInsights.update

recommender.runServiceCostRecommendations.*

  • recommender.runServiceCostRecommendations.get
  • recommender.runServiceCostRecommendations.list
  • recommender.runServiceCostRecommendations.update

recommender.runServiceIdentityInsights.*

  • recommender.runServiceIdentityInsights.get
  • recommender.runServiceIdentityInsights.list
  • recommender.runServiceIdentityInsights.update

recommender.runServiceIdentityRecommendations.*

  • recommender.runServiceIdentityRecommendations.get
  • recommender.runServiceIdentityRecommendations.list
  • recommender.runServiceIdentityRecommendations.update

recommender.runServicePerformanceInsights.*

  • recommender.runServicePerformanceInsights.get
  • recommender.runServicePerformanceInsights.list
  • recommender.runServicePerformanceInsights.update

recommender.runServicePerformanceRecommendations.*

  • recommender.runServicePerformanceRecommendations.get
  • recommender.runServicePerformanceRecommendations.list
  • recommender.runServicePerformanceRecommendations.update

recommender.runServiceSecurityInsights.*

  • recommender.runServiceSecurityInsights.get
  • recommender.runServiceSecurityInsights.list
  • recommender.runServiceSecurityInsights.update

recommender.runServiceSecurityRecommendations.*

  • recommender.runServiceSecurityRecommendations.get
  • recommender.runServiceSecurityRecommendations.list
  • recommender.runServiceSecurityRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

  • recommender.storageBucketSoftDeleteInsights.get
  • recommender.storageBucketSoftDeleteInsights.list
  • recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

  • recommender.storageBucketSoftDeleteRecommendations.get
  • recommender.storageBucketSoftDeleteRecommendations.list
  • recommender.storageBucketSoftDeleteRecommendations.update

remotebuildexecution.blobs.get

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.*

  • run.configurations.get
  • run.configurations.list
  • run.executions.cancel
  • run.executions.delete
  • run.executions.get
  • run.executions.list
  • run.jobs.create
  • run.jobs.createTagBinding
  • run.jobs.delete
  • run.jobs.deleteTagBinding
  • run.jobs.get
  • run.jobs.getIamPolicy
  • run.jobs.list
  • run.jobs.listEffectiveTags
  • run.jobs.listTagBindings
  • run.jobs.run
  • run.jobs.runWithOverrides
  • run.jobs.setIamPolicy
  • run.jobs.update
  • run.locations.list
  • run.operations.delete
  • run.operations.get
  • run.operations.list
  • run.revisions.delete
  • run.revisions.get
  • run.revisions.list
  • run.routes.get
  • run.routes.invoke
  • run.routes.list
  • run.services.create
  • run.services.createTagBinding
  • run.services.delete
  • run.services.deleteTagBinding
  • run.services.get
  • run.services.getIamPolicy
  • run.services.list
  • run.services.listEffectiveTags
  • run.services.listTagBindings
  • run.services.setIamPolicy
  • run.services.update
  • run.tasks.get
  • run.tasks.list

runtimeconfig.configs.create

runtimeconfig.configs.delete

runtimeconfig.configs.get

runtimeconfig.configs.list

runtimeconfig.configs.update

runtimeconfig.operations.*

  • runtimeconfig.operations.get
  • runtimeconfig.operations.list

runtimeconfig.variables.create

runtimeconfig.variables.delete

runtimeconfig.variables.get

runtimeconfig.variables.list

runtimeconfig.variables.update

runtimeconfig.variables.watch

runtimeconfig.waiters.create

runtimeconfig.waiters.delete

runtimeconfig.waiters.get

runtimeconfig.waiters.list

runtimeconfig.waiters.update

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

storage.anywhereCaches.*

  • storage.anywhereCaches.create
  • storage.anywhereCaches.disable
  • storage.anywhereCaches.get
  • storage.anywhereCaches.list
  • storage.anywhereCaches.pause
  • storage.anywhereCaches.resume
  • storage.anywhereCaches.update

storage.bucketOperations.*

  • storage.bucketOperations.cancel
  • storage.bucketOperations.get
  • storage.bucketOperations.list

storage.buckets.*

  • storage.buckets.create
  • storage.buckets.createTagBinding
  • storage.buckets.delete
  • storage.buckets.deleteTagBinding
  • storage.buckets.enableObjectRetention
  • storage.buckets.get
  • storage.buckets.getIamPolicy
  • storage.buckets.getIpFilter
  • storage.buckets.getObjectInsights
  • storage.buckets.list
  • storage.buckets.listEffectiveTags
  • storage.buckets.listTagBindings
  • storage.buckets.relocate
  • storage.buckets.restore
  • storage.buckets.setIamPolicy
  • storage.buckets.setIpFilter
  • storage.buckets.update

storage.folders.*

  • storage.folders.create
  • storage.folders.delete
  • storage.folders.get
  • storage.folders.list
  • storage.folders.rename

storage.intelligenceConfigs.*

  • storage.intelligenceConfigs.get
  • storage.intelligenceConfigs.update

storage.managedFolders.*

  • storage.managedFolders.create
  • storage.managedFolders.delete
  • storage.managedFolders.get
  • storage.managedFolders.getIamPolicy
  • storage.managedFolders.list
  • storage.managedFolders.setIamPolicy

storage.multipartUploads.*

  • storage.multipartUploads.abort
  • storage.multipartUploads.create
  • storage.multipartUploads.list
  • storage.multipartUploads.listParts

storage.objects.*

  • storage.objects.create
  • storage.objects.delete
  • storage.objects.get
  • storage.objects.getIamPolicy
  • storage.objects.list
  • storage.objects.move
  • storage.objects.overrideUnlockedRetention
  • storage.objects.restore
  • storage.objects.setIamPolicy
  • storage.objects.setRetention
  • storage.objects.update

(roles/firebase.developViewer)

Read access to Firebase Develop products and Analytics.

apikeys.keys.get

apikeys.keys.list

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

clientauthconfig.brands.get

clientauthconfig.brands.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

  • cloudbuild.locations.get
  • cloudbuild.locations.list

cloudbuild.operations.*

  • cloudbuild.operations.get
  • cloudbuild.operations.list

cloudfunctions.functions.get

cloudfunctions.functions.getIamPolicy

cloudfunctions.functions.list

cloudfunctions.locations.list

cloudfunctions.operations.*

  • cloudfunctions.operations.get
  • cloudfunctions.operations.list

cloudnotifications.activities.list

datastore.backups.get

datastore.backups.list

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.get

datastore.entities.list

datastore.indexes.get

datastore.indexes.list

datastore.namespaces.*

  • datastore.namespaces.get
  • datastore.namespaces.list

datastore.statistics.*

  • datastore.statistics.get
  • datastore.statistics.list

errorreporting.groups.list

eventarc.channelConnections.get

eventarc.channelConnections.getIamPolicy

eventarc.channelConnections.list

eventarc.channels.get

eventarc.channels.getIamPolicy

eventarc.channels.list

eventarc.enrollments.get

eventarc.enrollments.getIamPolicy

eventarc.enrollments.list

eventarc.googleApiSources.get

eventarc.googleApiSources.getIamPolicy

eventarc.googleApiSources.list

eventarc.googleChannelConfigs.get

eventarc.kafkaSources.get

eventarc.kafkaSources.getIamPolicy

eventarc.kafkaSources.list

eventarc.locations.*

  • eventarc.locations.get
  • eventarc.locations.list

eventarc.messageBuses.get

eventarc.messageBuses.getIamPolicy

eventarc.messageBuses.list

eventarc.messageBuses.use

eventarc.operations.get

eventarc.operations.list

eventarc.pipelines.get

eventarc.pipelines.getIamPolicy

eventarc.pipelines.list

eventarc.providers.*

  • eventarc.providers.get
  • eventarc.providers.list

eventarc.triggers.get

eventarc.triggers.getIamPolicy

eventarc.triggers.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.appAttestConfig.get

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

firebaseauth.configs.get

firebaseauth.users.get

firebasedatabase.instances.get

firebasedatabase.instances.list

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.list

firebaseextensions.configs.list

firebasehosting.sites.get

firebasehosting.sites.list

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

firebaserules.releases.get

firebaserules.releases.list

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

remotebuildexecution.blobs.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.configurations.*

  • run.configurations.get
  • run.configurations.list

run.executions.get

run.executions.list

run.jobs.get

run.jobs.getIamPolicy

run.jobs.list

run.jobs.listEffectiveTags

run.jobs.listTagBindings

run.locations.list

run.operations.get

run.operations.list

run.revisions.get

run.revisions.list

run.routes.get

run.routes.list

run.services.get

run.services.getIamPolicy

run.services.list

run.services.listEffectiveTags

run.services.listTagBindings

run.tasks.*

  • run.tasks.get
  • run.tasks.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list

(roles/firebase.growthAdmin)

Full access to Firebase Grow products and Analytics.

apikeys.keys.get

apikeys.keys.list

clientauthconfig.clients.get

clientauthconfig.clients.list

cloudconfig.*

  • cloudconfig.configs.get
  • cloudconfig.configs.update

cloudmessaging.messages.create

cloudnotifications.activities.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.*

  • firebaseabt.experimentresults.get
  • firebaseabt.experiments.create
  • firebaseabt.experiments.delete
  • firebaseabt.experiments.get
  • firebaseabt.experiments.list
  • firebaseabt.experiments.update
  • firebaseabt.projectmetadata.get

firebaseanalytics.*

  • firebaseanalytics.resources.googleAnalyticsEdit
  • firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebasedynamiclinks.*

  • firebasedynamiclinks.destinations.list
  • firebasedynamiclinks.destinations.update
  • firebasedynamiclinks.domains.create
  • firebasedynamiclinks.domains.delete
  • firebasedynamiclinks.domains.get
  • firebasedynamiclinks.domains.list
  • firebasedynamiclinks.domains.update
  • firebasedynamiclinks.links.create
  • firebasedynamiclinks.links.get
  • firebasedynamiclinks.links.list
  • firebasedynamiclinks.links.update
  • firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseinappmessaging.*

  • firebaseinappmessaging.campaigns.create
  • firebaseinappmessaging.campaigns.delete
  • firebaseinappmessaging.campaigns.get
  • firebaseinappmessaging.campaigns.list
  • firebaseinappmessaging.campaigns.update

firebasemessagingcampaigns.*

  • firebasemessagingcampaigns.campaigns.create
  • firebasemessagingcampaigns.campaigns.delete
  • firebasemessagingcampaigns.campaigns.get
  • firebasemessagingcampaigns.campaigns.list
  • firebasemessagingcampaigns.campaigns.start
  • firebasemessagingcampaigns.campaigns.stop
  • firebasemessagingcampaigns.campaigns.update

firebasenotifications.*

  • firebasenotifications.messages.create
  • firebasenotifications.messages.delete
  • firebasenotifications.messages.get
  • firebasenotifications.messages.list
  • firebasenotifications.messages.update

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

(roles/firebase.growthViewer)

Read access to Firebase Grow products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudconfig.configs.get

cloudnotifications.activities.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.experimentresults.get

firebaseabt.experiments.get

firebaseabt.experiments.list

firebaseabt.projectmetadata.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebasedynamiclinks.destinations.list

firebasedynamiclinks.domains.get

firebasedynamiclinks.domains.list

firebasedynamiclinks.links.get

firebasedynamiclinks.links.list

firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseinappmessaging.campaigns.get

firebaseinappmessaging.campaigns.list

firebasemessagingcampaigns.campaigns.get

firebasemessagingcampaigns.campaigns.list

firebasenotifications.messages.get

firebasenotifications.messages.list

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

(roles/firebase.managementServiceAgent)

Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services.

apikeys.keys.create

apikeys.keys.get

apikeys.keys.list

apikeys.keys.update

appengine.applications.create

appengine.applications.get

appengine.applications.update

appengine.operations.get

appengine.services.list

bigquery.datasets.create

bigquery.datasets.get

bigquery.datasets.update

bigquery.transfers.*

  • bigquery.transfers.get
  • bigquery.transfers.update

clientauthconfig.brands.create

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.create

clientauthconfig.clients.delete

clientauthconfig.clients.get

clientauthconfig.clients.getWithSecret

clientauthconfig.clients.list

clientauthconfig.clients.update

firebase.clients.create

firebase.clients.delete

firebase.clients.get

firebase.clients.undelete

firebase.clients.update

firebase.projects.*

  • firebase.projects.delete
  • firebase.projects.get
  • firebase.projects.update

firebaseabt.experiments.delete

firebaseauth.configs.create

firebaseauth.configs.get

firebaseauth.configs.update

firebaserules.releases.create

firebaserules.releases.delete

firebaserules.releases.get

firebaserules.rulesets.create

firebasestorage.defaultBucket.get

iam.roles.get

iam.serviceAccounts.create

iam.serviceAccounts.get

iam.serviceAccounts.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.setIamPolicy

resourcemanager.projects.update

servicemanagement.services.bind

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

serviceusage.services.use

storage.buckets.create

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.buckets.setIamPolicy

(roles/firebase.qualityAdmin)

Full access to Firebase Quality products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

  • firebaseanalytics.resources.googleAnalyticsEdit
  • firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappdistro.*

  • firebaseappdistro.groups.list
  • firebaseappdistro.groups.update
  • firebaseappdistro.releases.list
  • firebaseappdistro.releases.update
  • firebaseappdistro.testers.list
  • firebaseappdistro.testers.update

firebasecrash.*

  • firebasecrash.issues.update
  • firebasecrash.reports.get

firebasecrashlytics.*

  • firebasecrashlytics.config.get
  • firebasecrashlytics.config.update
  • firebasecrashlytics.data.get
  • firebasecrashlytics.issues.get
  • firebasecrashlytics.issues.list
  • firebasecrashlytics.issues.update
  • firebasecrashlytics.sessions.get

firebaseextensions.configs.list

firebaseperformance.*

  • firebaseperformance.config.update
  • firebaseperformance.data.get

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

(roles/firebase.qualityViewer)

Read access to Firebase Quality products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappdistro.groups.list

firebaseappdistro.releases.list

firebaseappdistro.testers.list

firebasecrash.reports.get

firebasecrashlytics.config.get

firebasecrashlytics.data.get

firebasecrashlytics.issues.get

firebasecrashlytics.issues.list

firebasecrashlytics.sessions.get

firebaseextensions.configs.list

firebaseperformance.data.get

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

(roles/firebase.sdkAdminServiceAgent)

Read and write access to Firebase products available in the Admin SDK

appengine.applications.get

cloudconfig.*

  • cloudconfig.configs.get
  • cloudconfig.configs.update

cloudmessaging.messages.create

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.*

  • datastore.entities.allocateIds
  • datastore.entities.create
  • datastore.entities.delete
  • datastore.entities.get
  • datastore.entities.list
  • datastore.entities.update

datastore.indexes.get

datastore.indexes.list

datastore.insights.get

datastore.namespaces.*

  • datastore.namespaces.get
  • datastore.namespaces.list

datastore.statistics.*

  • datastore.statistics.get
  • datastore.statistics.list

firebase.clients.*

  • firebase.clients.create
  • firebase.clients.delete
  • firebase.clients.get
  • firebase.clients.list
  • firebase.clients.undelete
  • firebase.clients.update

firebase.projects.get

firebase.projects.update

firebaseappcheck.*

  • firebaseappcheck.appAttestConfig.get
  • firebaseappcheck.appAttestConfig.update
  • firebaseappcheck.appCheckTokens.verify
  • firebaseappcheck.debugTokens.get
  • firebaseappcheck.debugTokens.update
  • firebaseappcheck.deviceCheckConfig.get
  • firebaseappcheck.deviceCheckConfig.update
  • firebaseappcheck.playIntegrityConfig.get
  • firebaseappcheck.playIntegrityConfig.update
  • firebaseappcheck.recaptchaEnterpriseConfig.get
  • firebaseappcheck.recaptchaEnterpriseConfig.update
  • firebaseappcheck.recaptchaV3Config.get
  • firebaseappcheck.recaptchaV3Config.update
  • firebaseappcheck.resourcePolicies.get
  • firebaseappcheck.resourcePolicies.update
  • firebaseappcheck.safetyNetConfig.get
  • firebaseappcheck.safetyNetConfig.update
  • firebaseappcheck.services.get
  • firebaseappcheck.services.update

firebaseauth.configs.create

firebaseauth.configs.get

firebaseauth.configs.getSecret

firebaseauth.configs.update

firebaseauth.users.*

  • firebaseauth.users.create
  • firebaseauth.users.createSession
  • firebaseauth.users.delete
  • firebaseauth.users.get
  • firebaseauth.users.sendEmail
  • firebaseauth.users.update

firebasedatabase.*

  • firebasedatabase.instances.create
  • firebasedatabase.instances.delete
  • firebasedatabase.instances.disable
  • firebasedatabase.instances.get
  • firebasedatabase.instances.list
  • firebasedatabase.instances.reenable
  • firebasedatabase.instances.undelete
  • firebasedatabase.instances.update

firebasedataconnect.*

  • firebasedataconnect.connectorRevisions.delete
  • firebasedataconnect.connectorRevisions.get
  • firebasedataconnect.connectorRevisions.list
  • firebasedataconnect.connectors.create
  • firebasedataconnect.connectors.delete
  • firebasedataconnect.connectors.get
  • firebasedataconnect.connectors.list
  • firebasedataconnect.connectors.update
  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list
  • firebasedataconnect.operations.cancel
  • firebasedataconnect.operations.delete
  • firebasedataconnect.operations.get
  • firebasedataconnect.operations.list
  • firebasedataconnect.schemaRevisions.delete
  • firebasedataconnect.schemaRevisions.get
  • firebasedataconnect.schemaRevisions.list
  • firebasedataconnect.schemas.create
  • firebasedataconnect.schemas.delete
  • firebasedataconnect.schemas.get
  • firebasedataconnect.schemas.list
  • firebasedataconnect.schemas.update
  • firebasedataconnect.services.create
  • firebasedataconnect.services.delete
  • firebasedataconnect.services.executeGraphql
  • firebasedataconnect.services.executeGraphqlRead
  • firebasedataconnect.services.get
  • firebasedataconnect.services.list
  • firebasedataconnect.services.update

firebasehosting.*

  • firebasehosting.sites.create
  • firebasehosting.sites.delete
  • firebasehosting.sites.get
  • firebasehosting.sites.list
  • firebasehosting.sites.update

firebaseml.*

  • firebaseml.models.create
  • firebaseml.models.delete
  • firebaseml.models.get
  • firebaseml.models.list
  • firebaseml.models.update
  • firebaseml.modelversions.create
  • firebaseml.modelversions.get
  • firebaseml.modelversions.list
  • firebaseml.modelversions.update

firebasenotifications.*

  • firebasenotifications.messages.create
  • firebasenotifications.messages.delete
  • firebasenotifications.messages.get
  • firebasenotifications.messages.list
  • firebasenotifications.messages.update

firebaserules.releases.get

firebaserules.releases.list

firebaserules.releases.update

firebaserules.rulesets.create

firebaserules.rulesets.delete

firebaserules.rulesets.get

firebaserules.rulesets.list

identitytoolkit.*

  • identitytoolkit.tenants.create
  • identitytoolkit.tenants.delete
  • identitytoolkit.tenants.get
  • identitytoolkit.tenants.getIamPolicy
  • identitytoolkit.tenants.list
  • identitytoolkit.tenants.setIamPolicy
  • identitytoolkit.tenants.update

orgpolicy.policy.get

resourcemanager.projects.get

resourcemanager.projects.list

resourcemanager.projects.update

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.list

storage.buckets.update

storage.folders.*

  • storage.folders.create
  • storage.folders.delete
  • storage.folders.get
  • storage.folders.list
  • storage.folders.rename

storage.managedFolders.create

storage.managedFolders.delete

storage.managedFolders.get

storage.managedFolders.list

storage.multipartUploads.*

  • storage.multipartUploads.abort
  • storage.multipartUploads.create
  • storage.multipartUploads.list
  • storage.multipartUploads.listParts

storage.objects.*

  • storage.objects.create
  • storage.objects.delete
  • storage.objects.get
  • storage.objects.getIamPolicy
  • storage.objects.list
  • storage.objects.move
  • storage.objects.overrideUnlockedRetention
  • storage.objects.restore
  • storage.objects.setIamPolicy
  • storage.objects.setRetention
  • storage.objects.update

(roles/firebase.sdkProvisioningServiceAgent)

Access to provision apps with the Admin SDK.

apikeys.keys.list

clientauthconfig.clients.list

cloudmessaging.messages.create

firebase.clients.create

servicemanagement.services.bind

serviceusage.services.enable

serviceusage.services.get

(roles/firebase.viewer)

Read-only access to Firebase products.

apikeys.keys.get

apikeys.keys.list

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

clientauthconfig.brands.get

clientauthconfig.brands.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

  • cloudbuild.locations.get
  • cloudbuild.locations.list

cloudbuild.operations.*

  • cloudbuild.operations.get
  • cloudbuild.operations.list

cloudconfig.configs.get

cloudfunctions.functions.get

cloudfunctions.functions.getIamPolicy

cloudfunctions.functions.list

cloudfunctions.locations.list

cloudfunctions.operations.*

  • cloudfunctions.operations.get
  • cloudfunctions.operations.list

cloudnotifications.activities.list

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.get

cloudtoolresults.executions.get

cloudtoolresults.executions.list

cloudtoolresults.histories.get

cloudtoolresults.histories.list

cloudtoolresults.settings.get

cloudtoolresults.steps.get

cloudtoolresults.steps.list

datastore.backups.get

datastore.backups.list

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.get

datastore.entities.list

datastore.indexes.get

datastore.indexes.list

datastore.namespaces.*

  • datastore.namespaces.get
  • datastore.namespaces.list

datastore.statistics.*

  • datastore.statistics.get
  • datastore.statistics.list

errorreporting.groups.list

eventarc.channelConnections.get

eventarc.channelConnections.getIamPolicy

eventarc.channelConnections.list

eventarc.channels.get

eventarc.channels.getIamPolicy

eventarc.channels.list

eventarc.enrollments.get

eventarc.enrollments.getIamPolicy

eventarc.enrollments.list

eventarc.googleApiSources.get

eventarc.googleApiSources.getIamPolicy

eventarc.googleApiSources.list

eventarc.googleChannelConfigs.get

eventarc.kafkaSources.get

eventarc.kafkaSources.getIamPolicy

eventarc.kafkaSources.list

eventarc.locations.*

  • eventarc.locations.get
  • eventarc.locations.list

eventarc.messageBuses.get

eventarc.messageBuses.getIamPolicy

eventarc.messageBuses.list

eventarc.messageBuses.use

eventarc.operations.get

eventarc.operations.list

eventarc.pipelines.get

eventarc.pipelines.getIamPolicy

eventarc.pipelines.list

eventarc.providers.*

  • eventarc.providers.get
  • eventarc.providers.list

eventarc.triggers.get

eventarc.triggers.getIamPolicy

eventarc.triggers.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.experimentresults.get

firebaseabt.experiments.get

firebaseabt.experiments.list

firebaseabt.projectmetadata.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.appAttestConfig.get

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

firebaseappdistro.groups.list

firebaseappdistro.releases.list

firebaseappdistro.testers.list

firebaseauth.configs.get

firebaseauth.users.get

firebasecrash.reports.get

firebasecrashlytics.config.get

firebasecrashlytics.data.get

firebasecrashlytics.issues.get

firebasecrashlytics.issues.list

firebasecrashlytics.sessions.get

firebasedatabase.instances.get

firebasedatabase.instances.list

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.list

firebasedynamiclinks.destinations.list

firebasedynamiclinks.domains.get

firebasedynamiclinks.domains.list

firebasedynamiclinks.links.get

firebasedynamiclinks.links.list

firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseextensionspublisher.extensions.get

firebaseextensionspublisher.extensions.list

firebasehosting.sites.get

firebasehosting.sites.list

firebaseinappmessaging.campaigns.get

firebaseinappmessaging.campaigns.list

firebasemessagingcampaigns.campaigns.get

firebasemessagingcampaigns.campaigns.list

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

firebasenotifications.messages.get

firebasenotifications.messages.list

firebaseperformance.data.get

firebaserules.releases.get

firebaserules.releases.list

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

remotebuildexecution.blobs.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.configurations.*

  • run.configurations.get
  • run.configurations.list

run.executions.get

run.executions.list

run.jobs.get

run.jobs.getIamPolicy

run.jobs.list

run.jobs.listEffectiveTags

run.jobs.listTagBindings

run.locations.list

run.operations.get

run.operations.list

run.revisions.get

run.revisions.list

run.routes.get

run.routes.list

run.services.get

run.services.getIamPolicy

run.services.list

run.services.listEffectiveTags

run.services.listTagBindings

run.tasks.*

  • run.tasks.get
  • run.tasks.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list

Firebase permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Viewer (roles/firebase.viewer)

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent)

OAuth Config Editor (roles/oauthconfig.editor)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Remote Config Admin (roles/cloudconfig.admin)

Firebase Remote Config Viewer (roles/cloudconfig.viewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase A/B Testing Admin (roles/firebaseabt.admin)

Firebase A/B Testing Viewer (roles/firebaseabt.viewer)

Firebase App Distribution Admin (roles/firebaseappdistro.admin)

Firebase App Distribution Viewer (roles/firebaseappdistro.viewer)

Firebase Authentication Admin (roles/firebaseauth.admin)

Firebase Authentication Viewer (roles/firebaseauth.viewer)

Firebase Crash Symbol Uploader (roles/firebasecrash.symbolMappingsAdmin)

Firebase Crashlytics Admin (roles/firebasecrashlytics.admin)

Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Firebase Realtime Database Viewer (roles/firebasedatabase.viewer)

Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin)

Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer)

Firebase Extensions Developer (roles/firebaseextensions.developer)

Firebase Extensions Viewer (roles/firebaseextensions.viewer)

Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin)

Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer)

Firebase Hosting Admin (roles/firebasehosting.admin)

Firebase Hosting Viewer (roles/firebasehosting.viewer)

Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin)

Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer)

Firebase ML Kit Admin (roles/firebaseml.admin)

Firebase ML Kit Viewer (roles/firebaseml.viewer)

Firebase Cloud Messaging Admin (roles/firebasenotifications.admin)

Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer)

Firebase Performance Reporting Admin (roles/firebaseperformance.admin)

Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer)

Cloud Storage for Firebase Admin (roles/firebasestorage.admin)

OAuth Config Editor (roles/oauthconfig.editor)

OAuth Config Viewer (roles/oauthconfig.viewer)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Remote Config Admin (roles/cloudconfig.admin)

Firebase Remote Config Viewer (roles/cloudconfig.viewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase A/B Testing Admin (roles/firebaseabt.admin)

Firebase A/B Testing Viewer (roles/firebaseabt.viewer)

Firebase App Distribution Admin (roles/firebaseappdistro.admin)

Firebase App Distribution Viewer (roles/firebaseappdistro.viewer)

Firebase Authentication Admin (roles/firebaseauth.admin)

Firebase Authentication Viewer (roles/firebaseauth.viewer)

Firebase Crash Symbol Uploader (roles/firebasecrash.symbolMappingsAdmin)

Firebase Crashlytics Admin (roles/firebasecrashlytics.admin)

Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Firebase Realtime Database Viewer (roles/firebasedatabase.viewer)

Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin)

Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer)

Firebase Extensions Developer (roles/firebaseextensions.developer)

Firebase Extensions Viewer (roles/firebaseextensions.viewer)

Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin)

Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer)

Firebase Hosting Admin (roles/firebasehosting.admin)

Firebase Hosting Viewer (roles/firebasehosting.viewer)

Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin)

Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer)

Firebase ML Kit Admin (roles/firebaseml.admin)

Firebase ML Kit Viewer (roles/firebaseml.viewer)

Firebase Cloud Messaging Admin (roles/firebasenotifications.admin)

Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer)

Firebase Performance Reporting Admin (roles/firebaseperformance.admin)

Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer)

Cloud Storage for Firebase Admin (roles/firebasestorage.admin)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

OAuth Config Editor (roles/oauthconfig.editor)

OAuth Config Viewer (roles/oauthconfig.viewer)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

OAuth Config Editor (roles/oauthconfig.editor)

Service agent roles

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Viewer (roles/firebase.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Viewer (roles/firebase.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Viewer (roles/firebase.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Owner (roles/owner)

Firebase Admin (roles/firebase.admin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Actions Admin (roles/actions.Admin)

Actions Viewer (roles/actions.Viewer)

Firebase Remote Config Admin (roles/cloudconfig.admin)

Firebase Remote Config Viewer (roles/cloudconfig.viewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Firebase Admin (roles/firebase.admin)

Firebase Analytics Admin (roles/firebase.analyticsAdmin)

Firebase Analytics Viewer (roles/firebase.analyticsViewer)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Quality Admin (roles/firebase.qualityAdmin)

Firebase Quality Viewer (roles/firebase.qualityViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase A/B Testing Admin (roles/firebaseabt.admin)

Firebase A/B Testing Viewer (roles/firebaseabt.viewer)

Firebase App Distribution Admin (roles/firebaseappdistro.admin)

Firebase App Distribution Viewer (roles/firebaseappdistro.viewer)

Firebase Authentication Admin (roles/firebaseauth.admin)

Firebase Authentication Viewer (roles/firebaseauth.viewer)

Firebase Crashlytics Admin (roles/firebasecrashlytics.admin)

Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Firebase Realtime Database Viewer (roles/firebasedatabase.viewer)

Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin)

Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer)

Firebase Extensions Developer (roles/firebaseextensions.developer)

Firebase Extensions Viewer (roles/firebaseextensions.viewer)

Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin)

Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer)

Firebase Hosting Admin (roles/firebasehosting.admin)

Firebase Hosting Viewer (roles/firebasehosting.viewer)

Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin)

Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer)

Firebase ML Kit Admin (roles/firebaseml.admin)

Firebase ML Kit Viewer (roles/firebaseml.viewer)

Firebase Cloud Messaging Admin (roles/firebasenotifications.admin)

Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer)

Firebase Performance Reporting Admin (roles/firebaseperformance.admin)

Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer)

Cloud Storage for Firebase Admin (roles/firebasestorage.admin)

Storage Admin (roles/storage.admin)

Storage HMAC Key Admin (roles/storage.hmacKeyAdmin)

Service agent roles

Owner (roles/owner)

Editor (roles/editor)

Actions Admin (roles/actions.Admin)

Firebase Admin (roles/firebase.admin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Service agent roles