Firebase roles and permissions

This page lists the IAM roles and permissions for Firebase. To search through all roles and permissions, see the role and permission index.

Firebase roles

Role	Permissions
Firebase Admin (roles/firebase.admin) Full access to Firebase products.	apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.lookup appengine.applications.get artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.exportArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list automl.* automl.annotationSpecs.create automl.annotationSpecs.delete automl.annotationSpecs.get automl.annotationSpecs.list automl.annotationSpecs.update automl.annotations.approve automl.annotations.create automl.annotations.list automl.annotations.manipulate automl.annotations.reject automl.columnSpecs.get automl.columnSpecs.list automl.columnSpecs.update automl.datasets.create automl.datasets.delete automl.datasets.export automl.datasets.get automl.datasets.getIamPolicy automl.datasets.import automl.datasets.list automl.datasets.setIamPolicy automl.datasets.update automl.examples.delete automl.examples.get automl.examples.list automl.examples.update automl.files.delete automl.files.list automl.humanAnnotationTasks.create automl.humanAnnotationTasks.delete automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.getIamPolicy automl.locations.list automl.locations.setIamPolicy automl.modelEvaluations.create automl.modelEvaluations.get automl.modelEvaluations.list automl.models.create automl.models.delete automl.models.deploy automl.models.export automl.models.get automl.models.getIamPolicy automl.models.list automl.models.predict automl.models.setIamPolicy automl.models.undeploy automl.operations.cancel automl.operations.delete automl.operations.get automl.operations.list automl.tableSpecs.get automl.tableSpecs.list automl.tableSpecs.update clientauthconfig.brands.get clientauthconfig.brands.list clientauthconfig.brands.update clientauthconfig.clients.create clientauthconfig.clients.delete clientauthconfig.clients.get clientauthconfig.clients.list clientauthconfig.clients.update cloudasset.assets.searchAllResources cloudbuild.builds.get cloudbuild.builds.list cloudbuild.locations.* cloudbuild.locations.get cloudbuild.locations.list cloudbuild.operations.* cloudbuild.operations.get cloudbuild.operations.list cloudconfig.* cloudconfig.configs.get cloudconfig.configs.update cloudfunctions.* cloudfunctions.functions.call cloudfunctions.functions.create cloudfunctions.functions.delete cloudfunctions.functions.generationUpgrade cloudfunctions.functions.get cloudfunctions.functions.getIamPolicy cloudfunctions.functions.invoke cloudfunctions.functions.list cloudfunctions.functions.setIamPolicy cloudfunctions.functions.sourceCodeGet cloudfunctions.functions.sourceCodeSet cloudfunctions.functions.update cloudfunctions.locations.list cloudfunctions.operations.get cloudfunctions.operations.list cloudkms.keyHandles.* cloudkms.keyHandles.create cloudkms.keyHandles.get cloudkms.keyHandles.list cloudkms.operations.get cloudkms.projects.showEffectiveAutokeyConfig cloudmessaging.messages.create cloudnotifications.activities.list cloudtestservice.environmentcatalog.get cloudtestservice.matrices.* cloudtestservice.matrices.create cloudtestservice.matrices.get cloudtestservice.matrices.update cloudtoolresults.* cloudtoolresults.executions.create cloudtoolresults.executions.get cloudtoolresults.executions.list cloudtoolresults.executions.update cloudtoolresults.histories.create cloudtoolresults.histories.get cloudtoolresults.histories.list cloudtoolresults.settings.create cloudtoolresults.settings.get cloudtoolresults.settings.update cloudtoolresults.steps.create cloudtoolresults.steps.get cloudtoolresults.steps.list cloudtoolresults.steps.update databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.studioQueries.* databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.get databasesconsole.studioQueries.list databasesconsole.studioQueries.search databasesconsole.studioQueries.update datastore.* datastore.backupSchedules.create datastore.backupSchedules.delete datastore.backupSchedules.get datastore.backupSchedules.list datastore.backupSchedules.update datastore.backups.delete datastore.backups.get datastore.backups.list datastore.backups.restoreDatabase datastore.databases.bulkDelete datastore.databases.clone datastore.databases.create datastore.databases.createTagBinding datastore.databases.delete datastore.databases.deleteTagBinding datastore.databases.export datastore.databases.get datastore.databases.getMetadata datastore.databases.import datastore.databases.list datastore.databases.listEffectiveTags datastore.databases.listTagBindings datastore.databases.update datastore.entities.allocateIds datastore.entities.create datastore.entities.delete datastore.entities.get datastore.entities.list datastore.entities.update datastore.indexes.create datastore.indexes.delete datastore.indexes.get datastore.indexes.list datastore.indexes.update datastore.insights.get datastore.keyVisualizerScans.get datastore.keyVisualizerScans.list datastore.locations.get datastore.locations.list datastore.namespaces.get datastore.namespaces.list datastore.operations.cancel datastore.operations.delete datastore.operations.get datastore.operations.list datastore.statistics.get datastore.statistics.list datastore.userCreds.create datastore.userCreds.delete datastore.userCreds.get datastore.userCreds.list datastore.userCreds.update errorreporting.groups.list eventarc.* eventarc.channelConnections.create eventarc.channelConnections.delete eventarc.channelConnections.get eventarc.channelConnections.getIamPolicy eventarc.channelConnections.list eventarc.channelConnections.publish eventarc.channelConnections.setIamPolicy eventarc.channels.attach eventarc.channels.create eventarc.channels.delete eventarc.channels.get eventarc.channels.getIamPolicy eventarc.channels.list eventarc.channels.publish eventarc.channels.setIamPolicy eventarc.channels.undelete eventarc.channels.update eventarc.enrollments.create eventarc.enrollments.delete eventarc.enrollments.get eventarc.enrollments.getIamPolicy eventarc.enrollments.list eventarc.enrollments.setIamPolicy eventarc.enrollments.update eventarc.events.receiveAuditLogWritten eventarc.events.receiveEvent eventarc.googleApiSources.create eventarc.googleApiSources.delete eventarc.googleApiSources.get eventarc.googleApiSources.getIamPolicy eventarc.googleApiSources.list eventarc.googleApiSources.setIamPolicy eventarc.googleApiSources.update eventarc.googleChannelConfigs.get eventarc.googleChannelConfigs.update eventarc.kafkaSources.create eventarc.kafkaSources.delete eventarc.kafkaSources.get eventarc.kafkaSources.getIamPolicy eventarc.kafkaSources.list eventarc.kafkaSources.setIamPolicy eventarc.locations.get eventarc.locations.list eventarc.messageBuses.create eventarc.messageBuses.delete eventarc.messageBuses.get eventarc.messageBuses.getIamPolicy eventarc.messageBuses.list eventarc.messageBuses.publish eventarc.messageBuses.setIamPolicy eventarc.messageBuses.update eventarc.messageBuses.use eventarc.multiProjectSources.collectGoogleApiEvents eventarc.operations.cancel eventarc.operations.delete eventarc.operations.get eventarc.operations.list eventarc.pipelines.create eventarc.pipelines.delete eventarc.pipelines.get eventarc.pipelines.getIamPolicy eventarc.pipelines.list eventarc.pipelines.setIamPolicy eventarc.pipelines.update eventarc.providers.get eventarc.providers.list eventarc.triggers.create eventarc.triggers.delete eventarc.triggers.get eventarc.triggers.getIamPolicy eventarc.triggers.list eventarc.triggers.setIamPolicy eventarc.triggers.undelete eventarc.triggers.update fcmdata.deliverydata.list firebase.* firebase.billingPlans.get firebase.billingPlans.update firebase.clients.create firebase.clients.delete firebase.clients.get firebase.clients.list firebase.clients.undelete firebase.clients.update firebase.links.create firebase.links.delete firebase.links.list firebase.links.update firebase.playLinks.get firebase.playLinks.list firebase.playLinks.update firebase.projects.delete firebase.projects.get firebase.projects.update firebaseabt.* firebaseabt.experimentresults.get firebaseabt.experiments.create firebaseabt.experiments.delete firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.experiments.update firebaseabt.projectmetadata.get firebaseanalytics.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.* firebaseappcheck.appAttestConfig.get firebaseappcheck.appAttestConfig.update firebaseappcheck.appCheckTokens.verify firebaseappcheck.automations.create firebaseappcheck.automations.delete firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.automations.resume firebaseappcheck.automations.suspend firebaseappcheck.automations.update firebaseappcheck.debugTokens.get firebaseappcheck.debugTokens.update firebaseappcheck.deviceCheckConfig.get firebaseappcheck.deviceCheckConfig.update firebaseappcheck.playIntegrityConfig.get firebaseappcheck.playIntegrityConfig.update firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaEnterpriseConfig.update firebaseappcheck.recaptchaV3Config.get firebaseappcheck.recaptchaV3Config.update firebaseappcheck.resourcePolicies.get firebaseappcheck.resourcePolicies.update firebaseappcheck.safetyNetConfig.get firebaseappcheck.safetyNetConfig.update firebaseappcheck.services.get firebaseappcheck.services.update firebaseappdistro.* firebaseappdistro.groups.list firebaseappdistro.groups.update firebaseappdistro.releases.list firebaseappdistro.releases.update firebaseappdistro.testers.list firebaseappdistro.testers.update firebaseapphosting.* firebaseapphosting.backends.create firebaseapphosting.backends.delete firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.backends.update firebaseapphosting.builds.create firebaseapphosting.builds.delete firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.domains.create firebaseapphosting.domains.delete firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.domains.update firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.cancel firebaseapphosting.operations.delete firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.create firebaseapphosting.rollouts.delete firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.rollouts.update firebaseapphosting.traffic.get firebaseapphosting.traffic.update firebaseauth.* firebaseauth.configs.create firebaseauth.configs.get firebaseauth.configs.getHashConfig firebaseauth.configs.getSecret firebaseauth.configs.update firebaseauth.users.create firebaseauth.users.createSession firebaseauth.users.delete firebaseauth.users.get firebaseauth.users.sendEmail firebaseauth.users.update firebasecrash.* firebasecrash.issues.update firebasecrash.reports.get firebasecrashlytics.* firebasecrashlytics.config.get firebasecrashlytics.config.update firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.issues.update firebasecrashlytics.sessions.get firebasedatabase.* firebasedatabase.instances.create firebasedatabase.instances.delete firebasedatabase.instances.disable firebasedatabase.instances.get firebasedatabase.instances.list firebasedatabase.instances.reenable firebasedatabase.instances.undelete firebasedatabase.instances.update firebasedataconnect.* firebasedataconnect.connectorRevisions.delete firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.create firebasedataconnect.connectors.delete firebasedataconnect.connectors.get firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.connectors.list firebasedataconnect.connectors.update firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.cancel firebasedataconnect.operations.delete firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.delete firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.create firebasedataconnect.schemas.delete firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.schemas.update firebasedataconnect.services.create firebasedataconnect.services.delete firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebasedataconnect.services.update firebasedynamiclinks.* firebasedynamiclinks.destinations.list firebasedynamiclinks.destinations.update firebasedynamiclinks.domains.create firebasedynamiclinks.domains.delete firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.domains.update firebasedynamiclinks.links.create firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.links.update firebasedynamiclinks.stats.get firebaseextensions.* firebaseextensions.configs.create firebaseextensions.configs.delete firebaseextensions.configs.list firebaseextensions.configs.update firebaseextensionspublisher.* firebaseextensionspublisher.extensions.create firebaseextensionspublisher.extensions.delete firebaseextensionspublisher.extensions.get firebaseextensionspublisher.extensions.list firebasehosting.* firebasehosting.sites.create firebasehosting.sites.delete firebasehosting.sites.get firebasehosting.sites.list firebasehosting.sites.update firebaseinappmessaging.* firebaseinappmessaging.campaigns.create firebaseinappmessaging.campaigns.delete firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebaseinappmessaging.campaigns.update firebasemessagingcampaigns.* firebasemessagingcampaigns.campaigns.create firebasemessagingcampaigns.campaigns.delete firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebasemessagingcampaigns.campaigns.start firebasemessagingcampaigns.campaigns.stop firebasemessagingcampaigns.campaigns.update firebaseml.* firebaseml.models.create firebaseml.models.delete firebaseml.models.get firebaseml.models.list firebaseml.models.update firebaseml.modelversions.create firebaseml.modelversions.get firebaseml.modelversions.list firebaseml.modelversions.update firebasenotifications.* firebasenotifications.messages.create firebasenotifications.messages.delete firebasenotifications.messages.get firebasenotifications.messages.list firebasenotifications.messages.update firebaseperformance.* firebaseperformance.config.update firebaseperformance.data.get firebaserules.* firebaserules.releases.create firebaserules.releases.delete firebaserules.releases.get firebaserules.releases.getExecutable firebaserules.releases.list firebaserules.releases.update firebaserules.rulesets.create firebaserules.rulesets.delete firebaserules.rulesets.get firebaserules.rulesets.list firebaserules.rulesets.test firebasestorage.* firebasestorage.buckets.addFirebase firebasestorage.buckets.get firebasestorage.buckets.list firebasestorage.buckets.removeFirebase firebasestorage.defaultBucket.create firebasestorage.defaultBucket.delete firebasestorage.defaultBucket.get firebasevertexai.* firebasevertexai.configs.get firebasevertexai.configs.update logging.logEntries.list monitoring.timeSeries.* monitoring.timeSeries.create monitoring.timeSeries.list oauthconfig.verification.get orgpolicy.policy.get recommender.cloudFunctionsPerformanceInsights.* recommender.cloudFunctionsPerformanceInsights.get recommender.cloudFunctionsPerformanceInsights.list recommender.cloudFunctionsPerformanceInsights.update recommender.cloudFunctionsPerformanceRecommendations.* recommender.cloudFunctionsPerformanceRecommendations.get recommender.cloudFunctionsPerformanceRecommendations.list recommender.cloudFunctionsPerformanceRecommendations.update recommender.iamPolicyInsights.* recommender.iamPolicyInsights.get recommender.iamPolicyInsights.list recommender.iamPolicyInsights.update recommender.iamPolicyRecommendations.* recommender.iamPolicyRecommendations.get recommender.iamPolicyRecommendations.list recommender.iamPolicyRecommendations.update recommender.locations.* recommender.locations.get recommender.locations.list recommender.runServiceCostInsights.* recommender.runServiceCostInsights.get recommender.runServiceCostInsights.list recommender.runServiceCostInsights.update recommender.runServiceCostRecommendations.* recommender.runServiceCostRecommendations.get recommender.runServiceCostRecommendations.list recommender.runServiceCostRecommendations.update recommender.runServiceIdentityInsights.* recommender.runServiceIdentityInsights.get recommender.runServiceIdentityInsights.list recommender.runServiceIdentityInsights.update recommender.runServiceIdentityRecommendations.* recommender.runServiceIdentityRecommendations.get recommender.runServiceIdentityRecommendations.list recommender.runServiceIdentityRecommendations.update recommender.runServicePerformanceInsights.* recommender.runServicePerformanceInsights.get recommender.runServicePerformanceInsights.list recommender.runServicePerformanceInsights.update recommender.runServicePerformanceRecommendations.* recommender.runServicePerformanceRecommendations.get recommender.runServicePerformanceRecommendations.list recommender.runServicePerformanceRecommendations.update recommender.runServiceSecurityInsights.* recommender.runServiceSecurityInsights.get recommender.runServiceSecurityInsights.list recommender.runServiceSecurityInsights.update recommender.runServiceSecurityRecommendations.* recommender.runServiceSecurityRecommendations.get recommender.runServiceSecurityRecommendations.list recommender.runServiceSecurityRecommendations.update recommender.storageBucketSoftDeleteInsights.* recommender.storageBucketSoftDeleteInsights.get recommender.storageBucketSoftDeleteInsights.list recommender.storageBucketSoftDeleteInsights.update recommender.storageBucketSoftDeleteRecommendations.* recommender.storageBucketSoftDeleteRecommendations.get recommender.storageBucketSoftDeleteRecommendations.list recommender.storageBucketSoftDeleteRecommendations.update remotebuildexecution.blobs.get resourcemanager.hierarchyNodes.listEffectiveTags resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list run.* run.configurations.get run.configurations.list run.executions.cancel run.executions.delete run.executions.get run.executions.list run.jobs.create run.jobs.createTagBinding run.jobs.delete run.jobs.deleteTagBinding run.jobs.get run.jobs.getIamPolicy run.jobs.list run.jobs.listEffectiveTags run.jobs.listTagBindings run.jobs.run run.jobs.runWithOverrides run.jobs.setIamPolicy run.jobs.update run.locations.list run.operations.delete run.operations.get run.operations.list run.revisions.delete run.revisions.get run.revisions.list run.routes.get run.routes.invoke run.routes.list run.services.create run.services.createTagBinding run.services.delete run.services.deleteTagBinding run.services.get run.services.getIamPolicy run.services.list run.services.listEffectiveTags run.services.listTagBindings run.services.setIamPolicy run.services.update run.tasks.get run.tasks.list run.workerpools.create run.workerpools.delete run.workerpools.get run.workerpools.getIamPolicy run.workerpools.list run.workerpools.setIamPolicy run.workerpools.update runtimeconfig.configs.create runtimeconfig.configs.delete runtimeconfig.configs.get runtimeconfig.configs.list runtimeconfig.configs.update runtimeconfig.operations.* runtimeconfig.operations.get runtimeconfig.operations.list runtimeconfig.variables.create runtimeconfig.variables.delete runtimeconfig.variables.get runtimeconfig.variables.list runtimeconfig.variables.update runtimeconfig.variables.watch runtimeconfig.waiters.create runtimeconfig.waiters.delete runtimeconfig.waiters.get runtimeconfig.waiters.list runtimeconfig.waiters.update serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test storage.anywhereCaches.* storage.anywhereCaches.create storage.anywhereCaches.disable storage.anywhereCaches.get storage.anywhereCaches.list storage.anywhereCaches.pause storage.anywhereCaches.resume storage.anywhereCaches.update storage.bucketOperations.* storage.bucketOperations.cancel storage.bucketOperations.get storage.bucketOperations.list storage.buckets.* storage.buckets.create storage.buckets.createTagBinding storage.buckets.delete storage.buckets.deleteTagBinding storage.buckets.enableObjectRetention storage.buckets.get storage.buckets.getIamPolicy storage.buckets.getIpFilter storage.buckets.getObjectInsights storage.buckets.list storage.buckets.listEffectiveTags storage.buckets.listTagBindings storage.buckets.relocate storage.buckets.restore storage.buckets.setIamPolicy storage.buckets.setIpFilter storage.buckets.update storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.intelligenceConfigs.* storage.intelligenceConfigs.get storage.intelligenceConfigs.update storage.managedFolders.* storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.getIamPolicy storage.managedFolders.list storage.managedFolders.setIamPolicy storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.* storage.objects.create storage.objects.delete storage.objects.get storage.objects.getIamPolicy storage.objects.list storage.objects.move storage.objects.overrideUnlockedRetention storage.objects.restore storage.objects.setIamPolicy storage.objects.setRetention storage.objects.update
Firebase Analytics Admin (roles/firebase.analyticsAdmin) Full access to Google Analytics for Firebase.	cloudnotifications.activities.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseextensions.configs.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Firebase Analytics Viewer (roles/firebase.analyticsViewer) Read access to Google Analytics for Firebase.	cloudnotifications.activities.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseextensions.configs.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Firebase App Distribution Admin SDK Service Agent (roles/firebase.appDistributionSdkServiceAgent) Read and write access to Firebase App Distribution with the Admin SDK Warning: Do not grant service agent roles to any principals except service agents.	firebaseappdistro.* firebaseappdistro.groups.list firebaseappdistro.groups.update firebaseappdistro.releases.list firebaseappdistro.releases.update firebaseappdistro.testers.list firebaseappdistro.testers.update
Firebase Develop Admin (roles/firebase.developAdmin) Full access to Firebase Develop products and Analytics.	apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.lookup appengine.applications.get artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.exportArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list automl.* automl.annotationSpecs.create automl.annotationSpecs.delete automl.annotationSpecs.get automl.annotationSpecs.list automl.annotationSpecs.update automl.annotations.approve automl.annotations.create automl.annotations.list automl.annotations.manipulate automl.annotations.reject automl.columnSpecs.get automl.columnSpecs.list automl.columnSpecs.update automl.datasets.create automl.datasets.delete automl.datasets.export automl.datasets.get automl.datasets.getIamPolicy automl.datasets.import automl.datasets.list automl.datasets.setIamPolicy automl.datasets.update automl.examples.delete automl.examples.get automl.examples.list automl.examples.update automl.files.delete automl.files.list automl.humanAnnotationTasks.create automl.humanAnnotationTasks.delete automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.getIamPolicy automl.locations.list automl.locations.setIamPolicy automl.modelEvaluations.create automl.modelEvaluations.get automl.modelEvaluations.list automl.models.create automl.models.delete automl.models.deploy automl.models.export automl.models.get automl.models.getIamPolicy automl.models.list automl.models.predict automl.models.setIamPolicy automl.models.undeploy automl.operations.cancel automl.operations.delete automl.operations.get automl.operations.list automl.tableSpecs.get automl.tableSpecs.list automl.tableSpecs.update clientauthconfig.brands.get clientauthconfig.brands.list clientauthconfig.brands.update clientauthconfig.clients.get clientauthconfig.clients.list cloudasset.assets.searchAllResources cloudbuild.builds.get cloudbuild.builds.list cloudbuild.locations.* cloudbuild.locations.get cloudbuild.locations.list cloudbuild.operations.* cloudbuild.operations.get cloudbuild.operations.list cloudfunctions.* cloudfunctions.functions.call cloudfunctions.functions.create cloudfunctions.functions.delete cloudfunctions.functions.generationUpgrade cloudfunctions.functions.get cloudfunctions.functions.getIamPolicy cloudfunctions.functions.invoke cloudfunctions.functions.list cloudfunctions.functions.setIamPolicy cloudfunctions.functions.sourceCodeGet cloudfunctions.functions.sourceCodeSet cloudfunctions.functions.update cloudfunctions.locations.list cloudfunctions.operations.get cloudfunctions.operations.list cloudkms.keyHandles.* cloudkms.keyHandles.create cloudkms.keyHandles.get cloudkms.keyHandles.list cloudkms.operations.get cloudkms.projects.showEffectiveAutokeyConfig cloudnotifications.activities.list databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.studioQueries.* databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.get databasesconsole.studioQueries.list databasesconsole.studioQueries.search databasesconsole.studioQueries.update datastore.* datastore.backupSchedules.create datastore.backupSchedules.delete datastore.backupSchedules.get datastore.backupSchedules.list datastore.backupSchedules.update datastore.backups.delete datastore.backups.get datastore.backups.list datastore.backups.restoreDatabase datastore.databases.bulkDelete datastore.databases.clone datastore.databases.create datastore.databases.createTagBinding datastore.databases.delete datastore.databases.deleteTagBinding datastore.databases.export datastore.databases.get datastore.databases.getMetadata datastore.databases.import datastore.databases.list datastore.databases.listEffectiveTags datastore.databases.listTagBindings datastore.databases.update datastore.entities.allocateIds datastore.entities.create datastore.entities.delete datastore.entities.get datastore.entities.list datastore.entities.update datastore.indexes.create datastore.indexes.delete datastore.indexes.get datastore.indexes.list datastore.indexes.update datastore.insights.get datastore.keyVisualizerScans.get datastore.keyVisualizerScans.list datastore.locations.get datastore.locations.list datastore.namespaces.get datastore.namespaces.list datastore.operations.cancel datastore.operations.delete datastore.operations.get datastore.operations.list datastore.statistics.get datastore.statistics.list datastore.userCreds.create datastore.userCreds.delete datastore.userCreds.get datastore.userCreds.list datastore.userCreds.update errorreporting.groups.list eventarc.* eventarc.channelConnections.create eventarc.channelConnections.delete eventarc.channelConnections.get eventarc.channelConnections.getIamPolicy eventarc.channelConnections.list eventarc.channelConnections.publish eventarc.channelConnections.setIamPolicy eventarc.channels.attach eventarc.channels.create eventarc.channels.delete eventarc.channels.get eventarc.channels.getIamPolicy eventarc.channels.list eventarc.channels.publish eventarc.channels.setIamPolicy eventarc.channels.undelete eventarc.channels.update eventarc.enrollments.create eventarc.enrollments.delete eventarc.enrollments.get eventarc.enrollments.getIamPolicy eventarc.enrollments.list eventarc.enrollments.setIamPolicy eventarc.enrollments.update eventarc.events.receiveAuditLogWritten eventarc.events.receiveEvent eventarc.googleApiSources.create eventarc.googleApiSources.delete eventarc.googleApiSources.get eventarc.googleApiSources.getIamPolicy eventarc.googleApiSources.list eventarc.googleApiSources.setIamPolicy eventarc.googleApiSources.update eventarc.googleChannelConfigs.get eventarc.googleChannelConfigs.update eventarc.kafkaSources.create eventarc.kafkaSources.delete eventarc.kafkaSources.get eventarc.kafkaSources.getIamPolicy eventarc.kafkaSources.list eventarc.kafkaSources.setIamPolicy eventarc.locations.get eventarc.locations.list eventarc.messageBuses.create eventarc.messageBuses.delete eventarc.messageBuses.get eventarc.messageBuses.getIamPolicy eventarc.messageBuses.list eventarc.messageBuses.publish eventarc.messageBuses.setIamPolicy eventarc.messageBuses.update eventarc.messageBuses.use eventarc.multiProjectSources.collectGoogleApiEvents eventarc.operations.cancel eventarc.operations.delete eventarc.operations.get eventarc.operations.list eventarc.pipelines.create eventarc.pipelines.delete eventarc.pipelines.get eventarc.pipelines.getIamPolicy eventarc.pipelines.list eventarc.pipelines.setIamPolicy eventarc.pipelines.update eventarc.providers.get eventarc.providers.list eventarc.triggers.create eventarc.triggers.delete eventarc.triggers.get eventarc.triggers.getIamPolicy eventarc.triggers.list eventarc.triggers.setIamPolicy eventarc.triggers.undelete eventarc.triggers.update firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.* firebaseappcheck.appAttestConfig.get firebaseappcheck.appAttestConfig.update firebaseappcheck.appCheckTokens.verify firebaseappcheck.automations.create firebaseappcheck.automations.delete firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.automations.resume firebaseappcheck.automations.suspend firebaseappcheck.automations.update firebaseappcheck.debugTokens.get firebaseappcheck.debugTokens.update firebaseappcheck.deviceCheckConfig.get firebaseappcheck.deviceCheckConfig.update firebaseappcheck.playIntegrityConfig.get firebaseappcheck.playIntegrityConfig.update firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaEnterpriseConfig.update firebaseappcheck.recaptchaV3Config.get firebaseappcheck.recaptchaV3Config.update firebaseappcheck.resourcePolicies.get firebaseappcheck.resourcePolicies.update firebaseappcheck.safetyNetConfig.get firebaseappcheck.safetyNetConfig.update firebaseappcheck.services.get firebaseappcheck.services.update firebaseapphosting.* firebaseapphosting.backends.create firebaseapphosting.backends.delete firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.backends.update firebaseapphosting.builds.create firebaseapphosting.builds.delete firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.domains.create firebaseapphosting.domains.delete firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.domains.update firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.cancel firebaseapphosting.operations.delete firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.create firebaseapphosting.rollouts.delete firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.rollouts.update firebaseapphosting.traffic.get firebaseapphosting.traffic.update firebaseauth.* firebaseauth.configs.create firebaseauth.configs.get firebaseauth.configs.getHashConfig firebaseauth.configs.getSecret firebaseauth.configs.update firebaseauth.users.create firebaseauth.users.createSession firebaseauth.users.delete firebaseauth.users.get firebaseauth.users.sendEmail firebaseauth.users.update firebasedatabase.* firebasedatabase.instances.create firebasedatabase.instances.delete firebasedatabase.instances.disable firebasedatabase.instances.get firebasedatabase.instances.list firebasedatabase.instances.reenable firebasedatabase.instances.undelete firebasedatabase.instances.update firebasedataconnect.* firebasedataconnect.connectorRevisions.delete firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.create firebasedataconnect.connectors.delete firebasedataconnect.connectors.get firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.connectors.list firebasedataconnect.connectors.update firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.cancel firebasedataconnect.operations.delete firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.delete firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.create firebasedataconnect.schemas.delete firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.schemas.update firebasedataconnect.services.create firebasedataconnect.services.delete firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebasedataconnect.services.update firebaseextensions.configs.list firebasehosting.* firebasehosting.sites.create firebasehosting.sites.delete firebasehosting.sites.get firebasehosting.sites.list firebasehosting.sites.update firebaseml.* firebaseml.models.create firebaseml.models.delete firebaseml.models.get firebaseml.models.list firebaseml.models.update firebaseml.modelversions.create firebaseml.modelversions.get firebaseml.modelversions.list firebaseml.modelversions.update firebaserules.* firebaserules.releases.create firebaserules.releases.delete firebaserules.releases.get firebaserules.releases.getExecutable firebaserules.releases.list firebaserules.releases.update firebaserules.rulesets.create firebaserules.rulesets.delete firebaserules.rulesets.get firebaserules.rulesets.list firebaserules.rulesets.test firebasestorage.* firebasestorage.buckets.addFirebase firebasestorage.buckets.get firebasestorage.buckets.list firebasestorage.buckets.removeFirebase firebasestorage.defaultBucket.create firebasestorage.defaultBucket.delete firebasestorage.defaultBucket.get firebasevertexai.* firebasevertexai.configs.get firebasevertexai.configs.update logging.logEntries.list monitoring.timeSeries.* monitoring.timeSeries.create monitoring.timeSeries.list oauthconfig.verification.get orgpolicy.policy.get recommender.cloudFunctionsPerformanceInsights.* recommender.cloudFunctionsPerformanceInsights.get recommender.cloudFunctionsPerformanceInsights.list recommender.cloudFunctionsPerformanceInsights.update recommender.cloudFunctionsPerformanceRecommendations.* recommender.cloudFunctionsPerformanceRecommendations.get recommender.cloudFunctionsPerformanceRecommendations.list recommender.cloudFunctionsPerformanceRecommendations.update recommender.iamPolicyInsights.* recommender.iamPolicyInsights.get recommender.iamPolicyInsights.list recommender.iamPolicyInsights.update recommender.iamPolicyRecommendations.* recommender.iamPolicyRecommendations.get recommender.iamPolicyRecommendations.list recommender.iamPolicyRecommendations.update recommender.locations.* recommender.locations.get recommender.locations.list recommender.runServiceCostInsights.* recommender.runServiceCostInsights.get recommender.runServiceCostInsights.list recommender.runServiceCostInsights.update recommender.runServiceCostRecommendations.* recommender.runServiceCostRecommendations.get recommender.runServiceCostRecommendations.list recommender.runServiceCostRecommendations.update recommender.runServiceIdentityInsights.* recommender.runServiceIdentityInsights.get recommender.runServiceIdentityInsights.list recommender.runServiceIdentityInsights.update recommender.runServiceIdentityRecommendations.* recommender.runServiceIdentityRecommendations.get recommender.runServiceIdentityRecommendations.list recommender.runServiceIdentityRecommendations.update recommender.runServicePerformanceInsights.* recommender.runServicePerformanceInsights.get recommender.runServicePerformanceInsights.list recommender.runServicePerformanceInsights.update recommender.runServicePerformanceRecommendations.* recommender.runServicePerformanceRecommendations.get recommender.runServicePerformanceRecommendations.list recommender.runServicePerformanceRecommendations.update recommender.runServiceSecurityInsights.* recommender.runServiceSecurityInsights.get recommender.runServiceSecurityInsights.list recommender.runServiceSecurityInsights.update recommender.runServiceSecurityRecommendations.* recommender.runServiceSecurityRecommendations.get recommender.runServiceSecurityRecommendations.list recommender.runServiceSecurityRecommendations.update recommender.storageBucketSoftDeleteInsights.* recommender.storageBucketSoftDeleteInsights.get recommender.storageBucketSoftDeleteInsights.list recommender.storageBucketSoftDeleteInsights.update recommender.storageBucketSoftDeleteRecommendations.* recommender.storageBucketSoftDeleteRecommendations.get recommender.storageBucketSoftDeleteRecommendations.list recommender.storageBucketSoftDeleteRecommendations.update remotebuildexecution.blobs.get resourcemanager.hierarchyNodes.listEffectiveTags resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list run.* run.configurations.get run.configurations.list run.executions.cancel run.executions.delete run.executions.get run.executions.list run.jobs.create run.jobs.createTagBinding run.jobs.delete run.jobs.deleteTagBinding run.jobs.get run.jobs.getIamPolicy run.jobs.list run.jobs.listEffectiveTags run.jobs.listTagBindings run.jobs.run run.jobs.runWithOverrides run.jobs.setIamPolicy run.jobs.update run.locations.list run.operations.delete run.operations.get run.operations.list run.revisions.delete run.revisions.get run.revisions.list run.routes.get run.routes.invoke run.routes.list run.services.create run.services.createTagBinding run.services.delete run.services.deleteTagBinding run.services.get run.services.getIamPolicy run.services.list run.services.listEffectiveTags run.services.listTagBindings run.services.setIamPolicy run.services.update run.tasks.get run.tasks.list run.workerpools.create run.workerpools.delete run.workerpools.get run.workerpools.getIamPolicy run.workerpools.list run.workerpools.setIamPolicy run.workerpools.update runtimeconfig.configs.create runtimeconfig.configs.delete runtimeconfig.configs.get runtimeconfig.configs.list runtimeconfig.configs.update runtimeconfig.operations.* runtimeconfig.operations.get runtimeconfig.operations.list runtimeconfig.variables.create runtimeconfig.variables.delete runtimeconfig.variables.get runtimeconfig.variables.list runtimeconfig.variables.update runtimeconfig.variables.watch runtimeconfig.waiters.create runtimeconfig.waiters.delete runtimeconfig.waiters.get runtimeconfig.waiters.list runtimeconfig.waiters.update serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test storage.anywhereCaches.* storage.anywhereCaches.create storage.anywhereCaches.disable storage.anywhereCaches.get storage.anywhereCaches.list storage.anywhereCaches.pause storage.anywhereCaches.resume storage.anywhereCaches.update storage.bucketOperations.* storage.bucketOperations.cancel storage.bucketOperations.get storage.bucketOperations.list storage.buckets.* storage.buckets.create storage.buckets.createTagBinding storage.buckets.delete storage.buckets.deleteTagBinding storage.buckets.enableObjectRetention storage.buckets.get storage.buckets.getIamPolicy storage.buckets.getIpFilter storage.buckets.getObjectInsights storage.buckets.list storage.buckets.listEffectiveTags storage.buckets.listTagBindings storage.buckets.relocate storage.buckets.restore storage.buckets.setIamPolicy storage.buckets.setIpFilter storage.buckets.update storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.intelligenceConfigs.* storage.intelligenceConfigs.get storage.intelligenceConfigs.update storage.managedFolders.* storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.getIamPolicy storage.managedFolders.list storage.managedFolders.setIamPolicy storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.* storage.objects.create storage.objects.delete storage.objects.get storage.objects.getIamPolicy storage.objects.list storage.objects.move storage.objects.overrideUnlockedRetention storage.objects.restore storage.objects.setIamPolicy storage.objects.setRetention storage.objects.update
Firebase Develop Viewer (roles/firebase.developViewer) Read access to Firebase Develop products and Analytics.	apikeys.keys.get apikeys.keys.list automl.annotationSpecs.get automl.annotationSpecs.list automl.annotations.list automl.columnSpecs.get automl.columnSpecs.list automl.datasets.get automl.datasets.list automl.examples.get automl.examples.list automl.files.list automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.list automl.modelEvaluations.get automl.modelEvaluations.list automl.models.get automl.models.list automl.operations.get automl.operations.list automl.tableSpecs.get automl.tableSpecs.list clientauthconfig.brands.get clientauthconfig.brands.list cloudasset.assets.searchAllResources cloudbuild.builds.get cloudbuild.builds.list cloudbuild.locations.* cloudbuild.locations.get cloudbuild.locations.list cloudbuild.operations.* cloudbuild.operations.get cloudbuild.operations.list cloudfunctions.functions.get cloudfunctions.functions.getIamPolicy cloudfunctions.functions.list cloudfunctions.locations.list cloudfunctions.operations.* cloudfunctions.operations.get cloudfunctions.operations.list cloudnotifications.activities.list datastore.backups.get datastore.backups.list datastore.databases.get datastore.databases.getMetadata datastore.databases.list datastore.entities.get datastore.entities.list datastore.indexes.get datastore.indexes.list datastore.namespaces.* datastore.namespaces.get datastore.namespaces.list datastore.statistics.* datastore.statistics.get datastore.statistics.list errorreporting.groups.list eventarc.channelConnections.get eventarc.channelConnections.getIamPolicy eventarc.channelConnections.list eventarc.channels.get eventarc.channels.getIamPolicy eventarc.channels.list eventarc.enrollments.get eventarc.enrollments.getIamPolicy eventarc.enrollments.list eventarc.googleApiSources.get eventarc.googleApiSources.getIamPolicy eventarc.googleApiSources.list eventarc.googleChannelConfigs.get eventarc.kafkaSources.get eventarc.kafkaSources.getIamPolicy eventarc.kafkaSources.list eventarc.locations.* eventarc.locations.get eventarc.locations.list eventarc.messageBuses.get eventarc.messageBuses.getIamPolicy eventarc.messageBuses.list eventarc.messageBuses.use eventarc.multiProjectSources.collectGoogleApiEvents eventarc.operations.get eventarc.operations.list eventarc.pipelines.get eventarc.pipelines.getIamPolicy eventarc.pipelines.list eventarc.providers.* eventarc.providers.get eventarc.providers.list eventarc.triggers.get eventarc.triggers.getIamPolicy eventarc.triggers.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.appAttestConfig.get firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.debugTokens.get firebaseappcheck.deviceCheckConfig.get firebaseappcheck.playIntegrityConfig.get firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaV3Config.get firebaseappcheck.resourcePolicies.get firebaseappcheck.safetyNetConfig.get firebaseappcheck.services.get firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.locations.* firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get firebaseauth.configs.get firebaseauth.users.get firebasedatabase.instances.get firebasedatabase.instances.list firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.get firebasedataconnect.connectors.list firebasedataconnect.locations.* firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebaseextensions.configs.list firebasehosting.sites.get firebasehosting.sites.list firebaseml.models.get firebaseml.models.list firebaseml.modelversions.get firebaseml.modelversions.list firebaserules.releases.get firebaserules.releases.list firebaserules.rulesets.get firebaserules.rulesets.list firebasestorage.buckets.get firebasestorage.buckets.list firebasestorage.defaultBucket.get firebasevertexai.configs.get logging.logEntries.list monitoring.timeSeries.list oauthconfig.verification.get recommender.cloudFunctionsPerformanceInsights.get recommender.cloudFunctionsPerformanceInsights.list recommender.cloudFunctionsPerformanceRecommendations.get recommender.cloudFunctionsPerformanceRecommendations.list recommender.locations.* recommender.locations.get recommender.locations.list recommender.runServiceCostInsights.get recommender.runServiceCostInsights.list recommender.runServiceCostRecommendations.get recommender.runServiceCostRecommendations.list recommender.runServiceIdentityInsights.get recommender.runServiceIdentityInsights.list recommender.runServiceIdentityRecommendations.get recommender.runServiceIdentityRecommendations.list recommender.runServicePerformanceInsights.get recommender.runServicePerformanceInsights.list recommender.runServicePerformanceRecommendations.get recommender.runServicePerformanceRecommendations.list recommender.runServiceSecurityInsights.get recommender.runServiceSecurityInsights.list recommender.runServiceSecurityRecommendations.get recommender.runServiceSecurityRecommendations.list remotebuildexecution.blobs.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list run.configurations.* run.configurations.get run.configurations.list run.executions.get run.executions.list run.jobs.get run.jobs.getIamPolicy run.jobs.list run.jobs.listEffectiveTags run.jobs.listTagBindings run.locations.list run.operations.get run.operations.list run.revisions.get run.revisions.list run.routes.get run.routes.list run.services.get run.services.getIamPolicy run.services.list run.services.listEffectiveTags run.services.listTagBindings run.tasks.* run.tasks.get run.tasks.list run.workerpools.get run.workerpools.getIamPolicy run.workerpools.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.objects.get storage.objects.getIamPolicy storage.objects.list
Firebase Grow Admin (roles/firebase.growthAdmin) Full access to Firebase Grow products and Analytics.	apikeys.keys.get apikeys.keys.list clientauthconfig.clients.get clientauthconfig.clients.list cloudconfig.* cloudconfig.configs.get cloudconfig.configs.update cloudmessaging.messages.create cloudnotifications.activities.list fcmdata.deliverydata.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.* firebaseabt.experimentresults.get firebaseabt.experiments.create firebaseabt.experiments.delete firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.experiments.update firebaseabt.projectmetadata.get firebaseanalytics.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebasedynamiclinks.* firebasedynamiclinks.destinations.list firebasedynamiclinks.destinations.update firebasedynamiclinks.domains.create firebasedynamiclinks.domains.delete firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.domains.update firebasedynamiclinks.links.create firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.links.update firebasedynamiclinks.stats.get firebaseextensions.configs.list firebaseinappmessaging.* firebaseinappmessaging.campaigns.create firebaseinappmessaging.campaigns.delete firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebaseinappmessaging.campaigns.update firebasemessagingcampaigns.* firebasemessagingcampaigns.campaigns.create firebasemessagingcampaigns.campaigns.delete firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebasemessagingcampaigns.campaigns.start firebasemessagingcampaigns.campaigns.stop firebasemessagingcampaigns.campaigns.update firebasenotifications.* firebasenotifications.messages.create firebasenotifications.messages.delete firebasenotifications.messages.get firebasenotifications.messages.list firebasenotifications.messages.update monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test
Firebase Grow Viewer (roles/firebase.growthViewer) Read access to Firebase Grow products and Analytics.	apikeys.keys.get apikeys.keys.list cloudconfig.configs.get cloudnotifications.activities.list fcmdata.deliverydata.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.experimentresults.get firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.projectmetadata.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebasedynamiclinks.destinations.list firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.stats.get firebaseextensions.configs.list firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebasenotifications.messages.get firebasenotifications.messages.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test
Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services. Warning: Do not grant service agent roles to any principals except service agents.	apikeys.keys.create apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.update appengine.applications.create appengine.applications.get appengine.applications.update appengine.operations.get appengine.services.list bigquery.datasets.create bigquery.datasets.get bigquery.datasets.setIamPolicy bigquery.datasets.update bigquery.transfers.* bigquery.transfers.get bigquery.transfers.update clientauthconfig.brands.create clientauthconfig.brands.get clientauthconfig.brands.list clientauthconfig.brands.update clientauthconfig.clients.create clientauthconfig.clients.delete clientauthconfig.clients.get clientauthconfig.clients.getWithSecret clientauthconfig.clients.list clientauthconfig.clients.update datastore.databases.create datastore.databases.get datastore.databases.list datastore.databases.update datastore.locations.* datastore.locations.get datastore.locations.list datastore.operations.get datastore.operations.list firebase.clients.create firebase.clients.delete firebase.clients.get firebase.clients.undelete firebase.clients.update firebase.projects.* firebase.projects.delete firebase.projects.get firebase.projects.update firebaseabt.experiments.delete firebaseapphosting.domains.create firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.domains.update firebaseauth.configs.create firebaseauth.configs.get firebaseauth.configs.update firebasedataconnect.locations.* firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.services.create firebasehosting.sites.create firebasehosting.sites.get firebasehosting.sites.list firebasehosting.sites.update firebaserules.releases.create firebaserules.releases.delete firebaserules.releases.get firebaserules.releases.list firebaserules.releases.update firebaserules.rulesets.create firebaserules.rulesets.get firebaserules.rulesets.list firebasestorage.defaultBucket.get firebasevertexai.* firebasevertexai.configs.get firebasevertexai.configs.update iam.roles.get iam.serviceAccounts.create iam.serviceAccounts.get iam.serviceAccounts.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.setIamPolicy resourcemanager.projects.update servicemanagement.services.bind serviceusage.consumerpolicy.* serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.consumerpolicy.update serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.enable serviceusage.services.get serviceusage.services.list serviceusage.services.use serviceusage.values.test storage.bucketOperations.get storage.bucketOperations.list storage.buckets.create storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.buckets.setIamPolicy storage.buckets.update
Firebase Quality Admin (roles/firebase.qualityAdmin) Full access to Firebase Quality products and Analytics.	apikeys.keys.get apikeys.keys.list cloudnotifications.activities.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappdistro.* firebaseappdistro.groups.list firebaseappdistro.groups.update firebaseappdistro.releases.list firebaseappdistro.releases.update firebaseappdistro.testers.list firebaseappdistro.testers.update firebasecrash.* firebasecrash.issues.update firebasecrash.reports.get firebasecrashlytics.* firebasecrashlytics.config.get firebasecrashlytics.config.update firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.issues.update firebasecrashlytics.sessions.get firebaseextensions.configs.list firebaseperformance.* firebaseperformance.config.update firebaseperformance.data.get monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test
Firebase Quality Viewer (roles/firebase.qualityViewer) Read access to Firebase Quality products and Analytics.	apikeys.keys.get apikeys.keys.list cloudnotifications.activities.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappdistro.groups.list firebaseappdistro.releases.list firebaseappdistro.testers.list firebasecrash.reports.get firebasecrashlytics.config.get firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.sessions.get firebaseextensions.configs.list firebaseperformance.data.get monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test
Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Read and write access to Firebase products available in the Admin SDK	appengine.applications.get cloudconfig.* cloudconfig.configs.get cloudconfig.configs.update cloudmessaging.messages.create databasesconsole.locations.* databasesconsole.locations.get databasesconsole.locations.list databasesconsole.studioQueries.create databasesconsole.studioQueries.delete databasesconsole.studioQueries.search databasesconsole.studioQueries.update datastore.databases.get datastore.databases.getMetadata datastore.databases.list datastore.entities.* datastore.entities.allocateIds datastore.entities.create datastore.entities.delete datastore.entities.get datastore.entities.list datastore.entities.update datastore.indexes.get datastore.indexes.list datastore.insights.get datastore.namespaces.* datastore.namespaces.get datastore.namespaces.list datastore.statistics.* datastore.statistics.get datastore.statistics.list firebase.clients.* firebase.clients.create firebase.clients.delete firebase.clients.get firebase.clients.list firebase.clients.undelete firebase.clients.update firebase.projects.get firebase.projects.update firebaseappcheck.* firebaseappcheck.appAttestConfig.get firebaseappcheck.appAttestConfig.update firebaseappcheck.appCheckTokens.verify firebaseappcheck.automations.create firebaseappcheck.automations.delete firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.automations.resume firebaseappcheck.automations.suspend firebaseappcheck.automations.update firebaseappcheck.debugTokens.get firebaseappcheck.debugTokens.update firebaseappcheck.deviceCheckConfig.get firebaseappcheck.deviceCheckConfig.update firebaseappcheck.playIntegrityConfig.get firebaseappcheck.playIntegrityConfig.update firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaEnterpriseConfig.update firebaseappcheck.recaptchaV3Config.get firebaseappcheck.recaptchaV3Config.update firebaseappcheck.resourcePolicies.get firebaseappcheck.resourcePolicies.update firebaseappcheck.safetyNetConfig.get firebaseappcheck.safetyNetConfig.update firebaseappcheck.services.get firebaseappcheck.services.update firebaseauth.configs.create firebaseauth.configs.get firebaseauth.configs.getSecret firebaseauth.configs.update firebaseauth.users.* firebaseauth.users.create firebaseauth.users.createSession firebaseauth.users.delete firebaseauth.users.get firebaseauth.users.sendEmail firebaseauth.users.update firebasedatabase.* firebasedatabase.instances.create firebasedatabase.instances.delete firebasedatabase.instances.disable firebasedatabase.instances.get firebasedatabase.instances.list firebasedatabase.instances.reenable firebasedatabase.instances.undelete firebasedatabase.instances.update firebasedataconnect.* firebasedataconnect.connectorRevisions.delete firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.create firebasedataconnect.connectors.delete firebasedataconnect.connectors.get firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.connectors.list firebasedataconnect.connectors.update firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.cancel firebasedataconnect.operations.delete firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.delete firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.create firebasedataconnect.schemas.delete firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.schemas.update firebasedataconnect.services.create firebasedataconnect.services.delete firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebasedataconnect.services.update firebasehosting.* firebasehosting.sites.create firebasehosting.sites.delete firebasehosting.sites.get firebasehosting.sites.list firebasehosting.sites.update firebaseml.* firebaseml.models.create firebaseml.models.delete firebaseml.models.get firebaseml.models.list firebaseml.models.update firebaseml.modelversions.create firebaseml.modelversions.get firebaseml.modelversions.list firebaseml.modelversions.update firebasenotifications.* firebasenotifications.messages.create firebasenotifications.messages.delete firebasenotifications.messages.get firebasenotifications.messages.list firebasenotifications.messages.update firebaserules.releases.get firebaserules.releases.list firebaserules.releases.update firebaserules.rulesets.create firebaserules.rulesets.delete firebaserules.rulesets.get firebaserules.rulesets.list identitytoolkit.* identitytoolkit.tenants.create identitytoolkit.tenants.delete identitytoolkit.tenants.get identitytoolkit.tenants.getIamPolicy identitytoolkit.tenants.list identitytoolkit.tenants.setIamPolicy identitytoolkit.tenants.update monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list resourcemanager.projects.update storage.buckets.create storage.buckets.delete storage.buckets.get storage.buckets.list storage.buckets.update storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.* storage.objects.create storage.objects.delete storage.objects.get storage.objects.getIamPolicy storage.objects.list storage.objects.move storage.objects.overrideUnlockedRetention storage.objects.restore storage.objects.setIamPolicy storage.objects.setRetention storage.objects.update
Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) Access to provision apps with the Admin SDK.	apikeys.keys.list clientauthconfig.clients.list cloudmessaging.messages.create firebase.clients.create servicemanagement.services.bind serviceusage.consumerpolicy.* serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.consumerpolicy.update serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.services.enable serviceusage.services.get serviceusage.values.test
Firebase Viewer (roles/firebase.viewer) Read-only access to Firebase products.	apikeys.keys.get apikeys.keys.list automl.annotationSpecs.get automl.annotationSpecs.list automl.annotations.list automl.columnSpecs.get automl.columnSpecs.list automl.datasets.get automl.datasets.list automl.examples.get automl.examples.list automl.files.list automl.humanAnnotationTasks.get automl.humanAnnotationTasks.list automl.locations.get automl.locations.list automl.modelEvaluations.get automl.modelEvaluations.list automl.models.get automl.models.list automl.operations.get automl.operations.list automl.tableSpecs.get automl.tableSpecs.list clientauthconfig.brands.get clientauthconfig.brands.list cloudasset.assets.searchAllResources cloudbuild.builds.get cloudbuild.builds.list cloudbuild.locations.* cloudbuild.locations.get cloudbuild.locations.list cloudbuild.operations.* cloudbuild.operations.get cloudbuild.operations.list cloudconfig.configs.get cloudfunctions.functions.get cloudfunctions.functions.getIamPolicy cloudfunctions.functions.list cloudfunctions.locations.list cloudfunctions.operations.* cloudfunctions.operations.get cloudfunctions.operations.list cloudnotifications.activities.list cloudtestservice.environmentcatalog.get cloudtestservice.matrices.get cloudtoolresults.executions.get cloudtoolresults.executions.list cloudtoolresults.histories.get cloudtoolresults.histories.list cloudtoolresults.settings.get cloudtoolresults.steps.get cloudtoolresults.steps.list datastore.backups.get datastore.backups.list datastore.databases.get datastore.databases.getMetadata datastore.databases.list datastore.entities.get datastore.entities.list datastore.indexes.get datastore.indexes.list datastore.namespaces.* datastore.namespaces.get datastore.namespaces.list datastore.statistics.* datastore.statistics.get datastore.statistics.list errorreporting.groups.list eventarc.channelConnections.get eventarc.channelConnections.getIamPolicy eventarc.channelConnections.list eventarc.channels.get eventarc.channels.getIamPolicy eventarc.channels.list eventarc.enrollments.get eventarc.enrollments.getIamPolicy eventarc.enrollments.list eventarc.googleApiSources.get eventarc.googleApiSources.getIamPolicy eventarc.googleApiSources.list eventarc.googleChannelConfigs.get eventarc.kafkaSources.get eventarc.kafkaSources.getIamPolicy eventarc.kafkaSources.list eventarc.locations.* eventarc.locations.get eventarc.locations.list eventarc.messageBuses.get eventarc.messageBuses.getIamPolicy eventarc.messageBuses.list eventarc.messageBuses.use eventarc.multiProjectSources.collectGoogleApiEvents eventarc.operations.get eventarc.operations.list eventarc.pipelines.get eventarc.pipelines.getIamPolicy eventarc.pipelines.list eventarc.providers.* eventarc.providers.get eventarc.providers.list eventarc.triggers.get eventarc.triggers.getIamPolicy eventarc.triggers.list fcmdata.deliverydata.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.experimentresults.get firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.projectmetadata.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.appAttestConfig.get firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.debugTokens.get firebaseappcheck.deviceCheckConfig.get firebaseappcheck.playIntegrityConfig.get firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaV3Config.get firebaseappcheck.resourcePolicies.get firebaseappcheck.safetyNetConfig.get firebaseappcheck.services.get firebaseappdistro.groups.list firebaseappdistro.releases.list firebaseappdistro.testers.list firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.locations.* firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get firebaseauth.configs.get firebaseauth.users.get firebasecrash.reports.get firebasecrashlytics.config.get firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.sessions.get firebasedatabase.instances.get firebasedatabase.instances.list firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.get firebasedataconnect.connectors.list firebasedataconnect.locations.* firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebasedynamiclinks.destinations.list firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.stats.get firebaseextensions.configs.list firebaseextensionspublisher.extensions.get firebaseextensionspublisher.extensions.list firebasehosting.sites.get firebasehosting.sites.list firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebaseml.models.get firebaseml.models.list firebaseml.modelversions.get firebaseml.modelversions.list firebasenotifications.messages.get firebasenotifications.messages.list firebaseperformance.data.get firebaserules.releases.get firebaserules.releases.list firebaserules.rulesets.get firebaserules.rulesets.list firebasestorage.buckets.get firebasestorage.buckets.list firebasestorage.defaultBucket.get firebasevertexai.configs.get logging.logEntries.list monitoring.timeSeries.list oauthconfig.verification.get recommender.cloudFunctionsPerformanceInsights.get recommender.cloudFunctionsPerformanceInsights.list recommender.cloudFunctionsPerformanceRecommendations.get recommender.cloudFunctionsPerformanceRecommendations.list recommender.locations.* recommender.locations.get recommender.locations.list recommender.runServiceCostInsights.get recommender.runServiceCostInsights.list recommender.runServiceCostRecommendations.get recommender.runServiceCostRecommendations.list recommender.runServiceIdentityInsights.get recommender.runServiceIdentityInsights.list recommender.runServiceIdentityRecommendations.get recommender.runServiceIdentityRecommendations.list recommender.runServicePerformanceInsights.get recommender.runServicePerformanceInsights.list recommender.runServicePerformanceRecommendations.get recommender.runServicePerformanceRecommendations.list recommender.runServiceSecurityInsights.get recommender.runServiceSecurityInsights.list recommender.runServiceSecurityRecommendations.get recommender.runServiceSecurityRecommendations.list remotebuildexecution.blobs.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list run.configurations.* run.configurations.get run.configurations.list run.executions.get run.executions.list run.jobs.get run.jobs.getIamPolicy run.jobs.list run.jobs.listEffectiveTags run.jobs.listTagBindings run.locations.list run.operations.get run.operations.list run.revisions.get run.revisions.list run.routes.get run.routes.list run.services.get run.services.getIamPolicy run.services.list run.services.listEffectiveTags run.services.listTagBindings run.tasks.* run.tasks.get run.tasks.list run.workerpools.get run.workerpools.getIamPolicy run.workerpools.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.contentsecuritypolicy.get serviceusage.effectivemcppolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.mcppolicy.get serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.values.test storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.objects.get storage.objects.getIamPolicy storage.objects.list

Firebase permissions

Permission	Included in roles
firebase.billingPlans.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Test Lab Admin (roles/cloudtestservice.testAdmin) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Viewer (roles/firebase.viewer) Support User (roles/iam.supportUser)
firebase.billingPlans.update	Owner (roles/owner) Firebase Admin (roles/firebase.admin)
firebase.clients.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase SDK Provisioning Service Agent (roles/firebase.sdkProvisioningServiceAgent) OAuth Config Editor (roles/oauthconfig.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebase.clients.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebase.clients.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Remote Config Admin (roles/cloudconfig.admin) Firebase Remote Config Viewer (roles/cloudconfig.viewer) Firebase Test Lab Admin (roles/cloudtestservice.testAdmin) Firebase Test Lab Viewer (roles/cloudtestservice.testViewer) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase A/B Testing Admin (roles/firebaseabt.admin) Firebase A/B Testing Viewer (roles/firebaseabt.viewer) Firebase App Distribution Admin (roles/firebaseappdistro.admin) Firebase App Distribution Viewer (roles/firebaseappdistro.viewer) Firebase Authentication Admin (roles/firebaseauth.admin) Firebase Authentication Viewer (roles/firebaseauth.viewer) Firebase Crash Symbol Uploader (roles/firebasecrash.symbolMappingsAdmin) Firebase Crashlytics Admin (roles/firebasecrashlytics.admin) Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin) Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer) Firebase Extensions Developer (roles/firebaseextensions.developer) Firebase Extensions Viewer (roles/firebaseextensions.viewer) Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin) Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer) Firebase Hosting Admin (roles/firebasehosting.admin) Firebase Hosting Viewer (roles/firebasehosting.viewer) Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin) Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer) Firebase ML Kit Admin (roles/firebaseml.admin) Firebase ML Kit Viewer (roles/firebaseml.viewer) Firebase Cloud Messaging Admin (roles/firebasenotifications.admin) Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer) Firebase Performance Reporting Admin (roles/firebaseperformance.admin) Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Support User (roles/iam.supportUser) OAuth Config Editor (roles/oauthconfig.editor) OAuth Config Viewer (roles/oauthconfig.viewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebase.clients.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Remote Config Admin (roles/cloudconfig.admin) Firebase Remote Config Viewer (roles/cloudconfig.viewer) Firebase Test Lab Admin (roles/cloudtestservice.testAdmin) Firebase Test Lab Viewer (roles/cloudtestservice.testViewer) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase A/B Testing Admin (roles/firebaseabt.admin) Firebase A/B Testing Viewer (roles/firebaseabt.viewer) Firebase App Distribution Admin (roles/firebaseappdistro.admin) Firebase App Distribution Viewer (roles/firebaseappdistro.viewer) Firebase Authentication Admin (roles/firebaseauth.admin) Firebase Authentication Viewer (roles/firebaseauth.viewer) Firebase Crash Symbol Uploader (roles/firebasecrash.symbolMappingsAdmin) Firebase Crashlytics Admin (roles/firebasecrashlytics.admin) Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin) Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer) Firebase Extensions Developer (roles/firebaseextensions.developer) Firebase Extensions Viewer (roles/firebaseextensions.viewer) Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin) Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer) Firebase Hosting Admin (roles/firebasehosting.admin) Firebase Hosting Viewer (roles/firebasehosting.viewer) Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin) Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer) Firebase ML Kit Admin (roles/firebaseml.admin) Firebase ML Kit Viewer (roles/firebaseml.viewer) Firebase Cloud Messaging Admin (roles/firebasenotifications.admin) Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer) Firebase Performance Reporting Admin (roles/firebaseperformance.admin) Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) OAuth Config Editor (roles/oauthconfig.editor) OAuth Config Viewer (roles/oauthconfig.viewer)
firebase.clients.undelete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebase.clients.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) OAuth Config Editor (roles/oauthconfig.editor) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebase.links.create	Owner (roles/owner) Firebase Admin (roles/firebase.admin)
firebase.links.delete	Owner (roles/owner) Firebase Admin (roles/firebase.admin)
firebase.links.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebase.links.update	Owner (roles/owner) Firebase Admin (roles/firebase.admin)
firebase.playLinks.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Viewer (roles/firebase.viewer) Support User (roles/iam.supportUser)
firebase.playLinks.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Viewer (roles/firebase.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebase.playLinks.update	Owner (roles/owner) Firebase Admin (roles/firebase.admin)
firebase.projects.delete	Owner (roles/owner) Firebase Admin (roles/firebase.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebase.projects.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Actions Admin (roles/actions.Admin) Actions Viewer (roles/actions.Viewer) Firebase Remote Config Admin (roles/cloudconfig.admin) Firebase Remote Config Viewer (roles/cloudconfig.viewer) Firebase Test Lab Admin (roles/cloudtestservice.testAdmin) Firebase Test Lab Viewer (roles/cloudtestservice.testViewer) Firebase Admin (roles/firebase.admin) Firebase Analytics Admin (roles/firebase.analyticsAdmin) Firebase Analytics Viewer (roles/firebase.analyticsViewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Grow Admin (roles/firebase.growthAdmin) Firebase Grow Viewer (roles/firebase.growthViewer) Firebase Quality Admin (roles/firebase.qualityAdmin) Firebase Quality Viewer (roles/firebase.qualityViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase A/B Testing Admin (roles/firebaseabt.admin) Firebase A/B Testing Viewer (roles/firebaseabt.viewer) Firebase App Distribution Admin (roles/firebaseappdistro.admin) Firebase App Distribution Viewer (roles/firebaseappdistro.viewer) Firebase Authentication Admin (roles/firebaseauth.admin) Firebase Authentication Viewer (roles/firebaseauth.viewer) Firebase Crashlytics Admin (roles/firebasecrashlytics.admin) Firebase Crashlytics Viewer (roles/firebasecrashlytics.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Firebase Dynamic Links Admin (roles/firebasedynamiclinks.admin) Firebase Dynamic Links Viewer (roles/firebasedynamiclinks.viewer) Firebase Extensions Developer (roles/firebaseextensions.developer) Firebase Extensions Viewer (roles/firebaseextensions.viewer) Firebase Extensions Publisher - Extensions Admin (roles/firebaseextensionspublisher.extensionsAdmin) Firebase Extensions Publisher - Extensions Viewer (roles/firebaseextensionspublisher.extensionsViewer) Firebase Hosting Admin (roles/firebasehosting.admin) Firebase Hosting Viewer (roles/firebasehosting.viewer) Firebase In-App Messaging Admin (roles/firebaseinappmessaging.admin) Firebase In-App Messaging Viewer (roles/firebaseinappmessaging.viewer) Firebase ML Kit Admin (roles/firebaseml.admin) Firebase ML Kit Viewer (roles/firebaseml.viewer) Firebase Cloud Messaging Admin (roles/firebasenotifications.admin) Firebase Cloud Messaging Viewer (roles/firebasenotifications.viewer) Firebase Performance Reporting Admin (roles/firebaseperformance.admin) Firebase Performance Reporting Viewer (roles/firebaseperformance.viewer) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Databases Admin (roles/iam.databasesAdmin) Infrastructure Administrator (roles/iam.infrastructureAdmin) Support User (roles/iam.supportUser) Storage Admin (roles/storage.admin) Storage HMAC Key Admin (roles/storage.hmacKeyAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (roles/composer.serviceAgent) Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Datapipelines Service Agent (roles/datapipelines.serviceAgent) Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Dataproc Service Agent (roles/dataproc.serviceAgent) DLP API Service Agent (roles/dlp.serviceAgent) Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) AI Platform Service Agent (roles/ml.serviceAgent) Visual Inspection AI Service Agent (roles/visualinspection.serviceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)
firebase.projects.update	Owner (roles/owner) Editor (roles/editor) Actions Admin (roles/actions.Admin) Firebase Admin (roles/firebase.admin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Cloud Deployment Manager Service Agent (roles/clouddeploymentmanager.serviceAgent)