Firebase Realtime Database roles and permissions

This page lists the IAM roles and permissions for Firebase Realtime Database. To search through all roles and permissions, see the role and permission index.

Firebase Realtime Database roles

Role Permissions

Role	Permissions
Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Full read/write access to Firebase Realtime Database resources.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebasedatabase.*` `firebasedatabase.instances.create` `firebasedatabase.instances.delete` `firebasedatabase.instances.disable` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `firebasedatabase.instances.reenable` `firebasedatabase.instances.undelete` `firebasedatabase.instances.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Firebase Realtime Database Service Agent (`roles/firebasedatabase.serviceAgent`) Access to publish triggers Warning: Do not grant service agent roles to any principals except service agents.	`pubsub.topics.publish` `serviceusage.services.use`
Firebase Realtime Database Viewer (`roles/firebasedatabase.viewer`) Read-only access to Firebase Realtime Database resources.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Firebase Realtime Database Admin

(roles/firebasedatabase.admin)

Full read/write access to Firebase Realtime Database resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebasedatabase.*

firebasedatabase.instances.create
firebasedatabase.instances.delete
firebasedatabase.instances.disable
firebasedatabase.instances.get
firebasedatabase.instances.list
firebasedatabase.instances.reenable
firebasedatabase.instances.undelete
firebasedatabase.instances.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Realtime Database Service Agent

(roles/firebasedatabase.serviceAgent)

Access to publish triggers

pubsub.topics.publish

serviceusage.services.use

Firebase Realtime Database Viewer

(roles/firebasedatabase.viewer)

Read-only access to Firebase Realtime Database resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebasedatabase.instances.get

firebasedatabase.instances.list

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Realtime Database permissions

Permission	Included in roles
`firebasedatabase.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`)
`firebasedatabase.instances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`)
`firebasedatabase.instances.disable`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`)
`firebasedatabase.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Firebase Realtime Database Viewer (`roles/firebasedatabase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`)
`firebasedatabase.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Firebase Realtime Database Viewer (`roles/firebasedatabase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`firebasedatabase.instances.reenable`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`)
`firebasedatabase.instances.undelete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`)
`firebasedatabase.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`)

Firebase Realtime Database roles and permissions