Identity Toolkit 角色和权限

本页面列出了 Identity Toolkit 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Identity Toolkit 角色

Role Permissions

Role	Permissions
Identity Toolkit Admin (`roles/identitytoolkit.admin`) Full access to Identity Toolkit resources.	`firebaseauth.` `firebaseauth.configs.create` `firebaseauth.configs.get` `firebaseauth.configs.getHashConfig` `firebaseauth.configs.getSecret` `firebaseauth.configs.update` `firebaseauth.users.create` `firebaseauth.users.createSession` `firebaseauth.users.delete` `firebaseauth.users.get` `firebaseauth.users.sendEmail` `firebaseauth.users.update` `identitytoolkit.` `identitytoolkit.tenants.create` `identitytoolkit.tenants.delete` `identitytoolkit.tenants.get` `identitytoolkit.tenants.getIamPolicy` `identitytoolkit.tenants.list` `identitytoolkit.tenants.setIamPolicy` `identitytoolkit.tenants.update`
Identity Platform Service Agent (`roles/identitytoolkit.serviceAgent`) Gives Identity Platform service account access to customer project resources. Warning: Do not grant service agent roles to any principals except service agents.	`cloudfunctions.functions.invoke` `recaptchaenterprise.assessments.create` `recaptchaenterprise.keys.create` `recaptchaenterprise.keys.delete` `recaptchaenterprise.keys.get`
Identity Toolkit Viewer (`roles/identitytoolkit.viewer`) Read access to Identity Toolkit resources.	`firebaseauth.configs.get` `firebaseauth.users.get` `identitytoolkit.tenants.get` `identitytoolkit.tenants.getIamPolicy` `identitytoolkit.tenants.list`

Identity Toolkit Admin

(roles/identitytoolkit.admin)

Full access to Identity Toolkit resources.

firebaseauth.*

firebaseauth.configs.create
firebaseauth.configs.get
firebaseauth.configs.getHashConfig
firebaseauth.configs.getSecret
firebaseauth.configs.update
firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update

identitytoolkit.*

identitytoolkit.tenants.create
identitytoolkit.tenants.delete
identitytoolkit.tenants.get
identitytoolkit.tenants.getIamPolicy
identitytoolkit.tenants.list
identitytoolkit.tenants.setIamPolicy
identitytoolkit.tenants.update

Identity Platform Service Agent

(roles/identitytoolkit.serviceAgent)

Gives Identity Platform service account access to customer project resources.

cloudfunctions.functions.invoke

recaptchaenterprise.assessments.create

recaptchaenterprise.keys.create

recaptchaenterprise.keys.delete

recaptchaenterprise.keys.get

Identity Toolkit Viewer

(roles/identitytoolkit.viewer)

Read access to Identity Toolkit resources.

firebaseauth.configs.get

firebaseauth.users.get

identitytoolkit.tenants.get

identitytoolkit.tenants.getIamPolicy

identitytoolkit.tenants.list

Identity Toolkit 权限

权限	以下角色拥有此权限
`identitytoolkit.tenants.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`identitytoolkit.tenants.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`identitytoolkit.tenants.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Platform Viewer (`roles/identityplatform.viewer`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Identity Toolkit Viewer (`roles/identitytoolkit.viewer`)
`identitytoolkit.tenants.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Platform Viewer (`roles/identityplatform.viewer`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Identity Toolkit Viewer (`roles/identitytoolkit.viewer`)
`identitytoolkit.tenants.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Platform Viewer (`roles/identityplatform.viewer`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Identity Toolkit Viewer (`roles/identitytoolkit.viewer`)
`identitytoolkit.tenants.setIamPolicy`	Owner (`roles/owner`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Security Admin (`roles/iam.securityAdmin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`identitytoolkit.tenants.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)

Identity Toolkit 角色和权限