Firebase Data Connect roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Firebase Data Connect. To search through all roles and permissions, see the role and permission index.

Firebase Data Connect roles

Role Permissions

Role	Permissions
Firebase Data Connect API Admin ^Beta (`roles/firebasedataconnect.admin`) Full access to Firebase Data Connect API resources, including data.	`firebasedataconnect.*` `firebasedataconnect.connectorRevisions.delete` `firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.create` `firebasedataconnect.connectors.delete` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.list` `firebasedataconnect.connectors.update` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.cancel` `firebasedataconnect.operations.delete` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.delete` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.create` `firebasedataconnect.schemas.delete` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.schemas.update` `firebasedataconnect.services.create` `firebasedataconnect.services.delete` `firebasedataconnect.services.executeGraphql` `firebasedataconnect.services.executeGraphqlRead` `firebasedataconnect.services.get` `firebasedataconnect.services.list` `firebasedataconnect.services.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Firebase Data Connect API Data Admin ^Beta (`roles/firebasedataconnect.dataAdmin`) Full access to data sources.	`firebasedataconnect.services.executeGraphql` `firebasedataconnect.services.executeGraphqlRead`
Firebase Data Connect API Data Viewer ^Beta (`roles/firebasedataconnect.dataViewer`) Readonly access to data sources.	`firebasedataconnect.services.executeGraphqlRead`
Firebase Data Connect Service Agent (`roles/firebasedataconnect.serviceAgent`) Gives Firebase Data Connect access to administer Cloud SQL instances. Warning: Do not grant service agent roles to any principals except service agents.	`cloudsql.databases.create` `cloudsql.databases.get` `cloudsql.instances.connect` `cloudsql.instances.get` `cloudsql.instances.login` `cloudsql.users.create` `cloudsql.users.get` `serviceusage.services.use`
Firebase Data Connect API Viewer ^Beta (`roles/firebasedataconnect.viewer`) Readonly access to Firebase Data Connect API resources. Role does not grant access to data.	`firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.list` `firebasedataconnect.locations.*` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.services.get` `firebasedataconnect.services.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Firebase Data Connect API Admin ^Beta

(roles/firebasedataconnect.admin)

Full access to Firebase Data Connect API resources, including data.

firebasedataconnect.*

firebasedataconnect.connectorRevisions.delete
firebasedataconnect.connectorRevisions.get
firebasedataconnect.connectorRevisions.list
firebasedataconnect.connectors.create
firebasedataconnect.connectors.delete
firebasedataconnect.connectors.get
firebasedataconnect.connectors.list
firebasedataconnect.connectors.update
firebasedataconnect.locations.get
firebasedataconnect.locations.list
firebasedataconnect.operations.cancel
firebasedataconnect.operations.delete
firebasedataconnect.operations.get
firebasedataconnect.operations.list
firebasedataconnect.schemaRevisions.delete
firebasedataconnect.schemaRevisions.get
firebasedataconnect.schemaRevisions.list
firebasedataconnect.schemas.create
firebasedataconnect.schemas.delete
firebasedataconnect.schemas.get
firebasedataconnect.schemas.list
firebasedataconnect.schemas.update
firebasedataconnect.services.create
firebasedataconnect.services.delete
firebasedataconnect.services.executeGraphql
firebasedataconnect.services.executeGraphqlRead
firebasedataconnect.services.get
firebasedataconnect.services.list
firebasedataconnect.services.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Data Connect API Data Admin ^Beta

(roles/firebasedataconnect.dataAdmin)

Full access to data sources.

firebasedataconnect.services.executeGraphql

firebasedataconnect.services.executeGraphqlRead

Firebase Data Connect API Data Viewer ^Beta

(roles/firebasedataconnect.dataViewer)

Readonly access to data sources.

firebasedataconnect.services.executeGraphqlRead

Firebase Data Connect Service Agent

(roles/firebasedataconnect.serviceAgent)

Gives Firebase Data Connect access to administer Cloud SQL instances.

cloudsql.databases.create

cloudsql.databases.get

cloudsql.instances.connect

cloudsql.instances.get

cloudsql.instances.login

cloudsql.users.create

cloudsql.users.get

serviceusage.services.use

Firebase Data Connect API Viewer ^Beta

(roles/firebasedataconnect.viewer)

Readonly access to Firebase Data Connect API resources. Role does not grant access to data.

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

firebasedataconnect.locations.get
firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.list

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Data Connect permissions

Permission	Included in roles
`firebasedataconnect.connectorRevisions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.connectorRevisions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.connectorRevisions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.connectors.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.connectors.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.connectors.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.connectors.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.connectors.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.schemaRevisions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.schemaRevisions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.schemaRevisions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.schemas.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.schemas.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.schemas.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.schemas.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.schemas.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.services.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.services.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)
`firebasedataconnect.services.executeGraphql`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Data Admin (`roles/firebasedataconnect.dataAdmin`)
`firebasedataconnect.services.executeGraphqlRead`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Data Admin (`roles/firebasedataconnect.dataAdmin`) Firebase Data Connect API Data Viewer (`roles/firebasedataconnect.dataViewer`)
`firebasedataconnect.services.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`)
`firebasedataconnect.services.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`) Firebase Data Connect API Viewer (`roles/firebasedataconnect.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`firebasedataconnect.services.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Data Connect API Admin (`roles/firebasedataconnect.admin`)

Firebase Data Connect roles and permissions
Stay organized with collections Save and categorize content based on your preferences.