Firestore 角色和权限
使用集合让一切井井有条
根据您的偏好保存内容并对其进行分类。
本页面列出了 Firestore 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。
Firestore 角色
| Role |
Permissions |
Cloud Datastore Backup Schedules Admin
(roles/datastore.backupSchedulesAdmin)
Manage backup schedules in Cloud Datastore.
|
datastore.backupSchedules.*
datastore.backupSchedules.createdatastore.backupSchedules.deletedatastore.backupSchedules.getdatastore.backupSchedules.listdatastore.backupSchedules.update
datastore.databases.getMetadata
datastore.databases.list
|
Cloud Datastore Backup Schedules Viewer
(roles/datastore.backupSchedulesViewer)
Read access to backup schedules in Cloud Datastore.
|
datastore.backupSchedules.get
datastore.backupSchedules.list
|
Cloud Datastore Backups Admin
(roles/datastore.backupsAdmin)
Read/Write access to metadata about backups in Cloud Datastore but restore is not allowed.
|
datastore.backups.delete
datastore.backups.get
datastore.backups.list
|
Cloud Datastore Backups Viewer
(roles/datastore.backupsViewer)
Read access to metadata about backups in Cloud Datastore.
|
datastore.backups.get
datastore.backups.list
|
Cloud Datastore Bulk Admin
(roles/datastore.bulkAdmin)
Full access to manage bulk operations.
|
datastore.databases.bulkDelete
datastore.databases.getMetadata
datastore.operations.cancel
datastore.operations.get
datastore.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
|
Cloud Datastore Clone Admin
(roles/datastore.cloneAdmin)
Clone Cloud Datastore Databases.
|
datastore.databases.clone
datastore.databases.create
datastore.databases.getMetadata
datastore.databases.list
datastore.operations.get
datastore.operations.list
|
Cloud Datastore Import Export Admin
(roles/datastore.importExportAdmin)
Provides full access to manage imports and exports.
Lowest-level resources where you can grant this role:
|
appengine.applications.get
datastore.databases.export
datastore.databases.getMetadata
datastore.databases.import
datastore.operations.cancel
datastore.operations.get
datastore.operations.list
resourcemanager.projects.get
resourcemanager.projects.list
|
Cloud Datastore Index Admin
(roles/datastore.indexAdmin)
Provides full access to manage index definitions.
Lowest-level resources where you can grant this role:
|
appengine.applications.get
datastore.databases.getMetadata
datastore.indexes.*
datastore.indexes.createdatastore.indexes.deletedatastore.indexes.getdatastore.indexes.listdatastore.indexes.update
resourcemanager.projects.get
resourcemanager.projects.list
|
Cloud Datastore Key Visualizer Viewer
(roles/datastore.keyVisualizerViewer)
Full access to Key Visualizer scans.
|
datastore.databases.getMetadata
datastore.keyVisualizerScans.*
datastore.keyVisualizerScans.getdatastore.keyVisualizerScans.list
resourcemanager.projects.get
resourcemanager.projects.list
|
Cloud Datastore Owner
(roles/datastore.owner)
Provides full access to Datastore resources.
Lowest-level resources where you can grant this role:
|
appengine.applications.get
datastore.*
datastore.backupSchedules.createdatastore.backupSchedules.deletedatastore.backupSchedules.getdatastore.backupSchedules.listdatastore.backupSchedules.updatedatastore.backups.deletedatastore.backups.getdatastore.backups.listdatastore.backups.restoreDatabasedatastore.databases.bulkDeletedatastore.databases.clonedatastore.databases.createdatastore.databases.createTagBindingdatastore.databases.deletedatastore.databases.deleteTagBindingdatastore.databases.exportdatastore.databases.getdatastore.databases.getMetadatadatastore.databases.importdatastore.databases.listdatastore.databases.listEffectiveTagsdatastore.databases.listTagBindingsdatastore.databases.updatedatastore.entities.allocateIdsdatastore.entities.createdatastore.entities.deletedatastore.entities.getdatastore.entities.listdatastore.entities.updatedatastore.indexes.createdatastore.indexes.deletedatastore.indexes.getdatastore.indexes.listdatastore.indexes.updatedatastore.insights.getdatastore.keyVisualizerScans.getdatastore.keyVisualizerScans.listdatastore.locations.getdatastore.locations.listdatastore.namespaces.getdatastore.namespaces.listdatastore.operations.canceldatastore.operations.deletedatastore.operations.getdatastore.operations.listdatastore.statistics.getdatastore.statistics.listdatastore.userCreds.createdatastore.userCreds.deletedatastore.userCreds.getdatastore.userCreds.listdatastore.userCreds.update
resourcemanager.projects.get
resourcemanager.projects.list
|
Cloud Datastore Restore Admin
(roles/datastore.restoreAdmin)
Restore into Cloud Datastore Databases from Cloud Datastore Backups.
|
datastore.backups.get
datastore.backups.list
datastore.backups.restoreDatabase
datastore.databases.create
datastore.databases.getMetadata
datastore.databases.list
datastore.operations.get
datastore.operations.list
|
Cloud Datastore User
(roles/datastore.user)
Provides read/write access to data in a Datastore database.
Lowest-level resources where you can grant this role:
|
appengine.applications.get
datastore.databases.get
datastore.databases.getMetadata
datastore.databases.list
datastore.entities.*
datastore.entities.allocateIdsdatastore.entities.createdatastore.entities.deletedatastore.entities.getdatastore.entities.listdatastore.entities.update
datastore.indexes.list
datastore.namespaces.*
datastore.namespaces.getdatastore.namespaces.list
datastore.statistics.*
datastore.statistics.getdatastore.statistics.list
resourcemanager.projects.get
resourcemanager.projects.list
|
Cloud Datastore User Creds Admin
(roles/datastore.userCredsAdmin)
Manage user creds in Cloud Datastore.
|
datastore.databases.getMetadata
datastore.databases.list
datastore.userCreds.*
datastore.userCreds.createdatastore.userCreds.deletedatastore.userCreds.getdatastore.userCreds.listdatastore.userCreds.update
|
Cloud Datastore User Creds Viewer
(roles/datastore.userCredsViewer)
Read access to user creds in Cloud Datastore.
|
datastore.userCreds.get
datastore.userCreds.list
|
Cloud Datastore Viewer
(roles/datastore.viewer)
Provides read access to Datastore resources.
Lowest-level resources where you can grant this role:
|
appengine.applications.get
datastore.databases.get
datastore.databases.getMetadata
datastore.databases.list
datastore.entities.get
datastore.entities.list
datastore.indexes.get
datastore.indexes.list
datastore.insights.get
datastore.namespaces.*
datastore.namespaces.getdatastore.namespaces.list
datastore.statistics.*
datastore.statistics.getdatastore.statistics.list
resourcemanager.projects.get
resourcemanager.projects.list
|
Firestore Service Agent
(roles/firestore.serviceAgent)
Gives Firestore service account access to managed resources.
|
storage.buckets.get
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
|
Firestore 权限
此服务没有 IAM 权限。
如未另行说明，那么本页面中的内容已根据知识共享署名 4.0 许可获得了许可，并且代码示例已根据 Apache 2.0 许可获得了许可。有关详情，请参阅 Google 开发者网站政策。Java 是 Oracle 和/或其关联公司的注册商标。
最后更新时间 (UTC)：2025-07-11。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-07-11。"],[],[]]
