English
Deutsch
Español – América Latina
Français
Português – Brasil
中文 – 简体
日本語
한국어

Console

Contact Us Start free

Firebase App Check roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Firebase App Check. To search through all roles and permissions, see the role and permission index.

Firebase App Check roles

Role	Permissions
Firebase App Check Admin (`roles/firebaseappcheck.admin`) Full management of Firebase App Check.	`firebaseappcheck.*` `firebaseappcheck.appAttestConfig.get` `firebaseappcheck.appAttestConfig.update` `firebaseappcheck.appCheckTokens.verify` `firebaseappcheck.debugTokens.get` `firebaseappcheck.debugTokens.update` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.deviceCheckConfig.update` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.playIntegrityConfig.update` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.update` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.recaptchaV3Config.update` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.resourcePolicies.update` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.safetyNetConfig.update` `firebaseappcheck.services.get` `firebaseappcheck.services.update`
Firebase App Check Service Agent (`roles/firebaseappcheck.serviceAgent`) Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.	`recaptchaenterprise.assessments.*` `recaptchaenterprise.assessments.annotate` `recaptchaenterprise.assessments.create` `serviceusage.services.use`
Firebase App Check Token Verifier (`roles/firebaseappcheck.tokenVerifier`) Access to token verification capabilities for Firebase App Check.	`firebaseappcheck.appCheckTokens.verify`
Firebase App Check Viewer (`roles/firebaseappcheck.viewer`) Read-only access for Firebase App Check.	`firebaseappcheck.appAttestConfig.get` `firebaseappcheck.debugTokens.get` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.services.get`

Firebase App Check permissions

Permission	Included in roles
`firebaseappcheck.appAttestConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.appAttestConfig.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.appCheckTokens.verify`	Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Token Verifier (`roles/firebaseappcheck.tokenVerifier`)
`firebaseappcheck.debugTokens.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.debugTokens.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.deviceCheckConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.deviceCheckConfig.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.playIntegrityConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.playIntegrityConfig.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.recaptchaEnterpriseConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.recaptchaEnterpriseConfig.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.recaptchaV3Config.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.recaptchaV3Config.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.resourcePolicies.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`) OAuth Config Editor (`roles/oauthconfig.editor`) OAuth Config Viewer (`roles/oauthconfig.viewer`)
`firebaseappcheck.resourcePolicies.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) OAuth Config Editor (`roles/oauthconfig.editor`)
`firebaseappcheck.safetyNetConfig.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.safetyNetConfig.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)
`firebaseappcheck.services.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Check Admin (`roles/firebaseappcheck.admin`) Firebase App Check Viewer (`roles/firebaseappcheck.viewer`)
`firebaseappcheck.services.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase App Check Admin (`roles/firebaseappcheck.admin`)

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-16 UTC.