Console

Firestore roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for Firestore. To search through all roles and permissions, see the role and permission index.

Firestore roles

Role Permissions

Role	Permissions
Firestore Service Agent (`roles/firestore.serviceAgent`) Gives Firestore service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	`storage.buckets.get` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list`

(roles/firestore.serviceAgent)

Gives Firestore service account access to managed resources.

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

There are no IAM permissions for this service.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-16 UTC.