Firebase App Check roles and permissions

This page lists the IAM roles and permissions for Firebase App Check. To search through all roles and permissions, see the role and permission index.

Firebase App Check roles

Role	Permissions
Firebase App Check Admin (roles/firebaseappcheck.admin) Full management of Firebase App Check.	firebaseappcheck.* firebaseappcheck.appAttestConfig.get firebaseappcheck.appAttestConfig.update firebaseappcheck.appCheckTokens.verify firebaseappcheck.automations.create firebaseappcheck.automations.delete firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.automations.resume firebaseappcheck.automations.suspend firebaseappcheck.automations.update firebaseappcheck.debugTokens.get firebaseappcheck.debugTokens.update firebaseappcheck.deviceCheckConfig.get firebaseappcheck.deviceCheckConfig.update firebaseappcheck.playIntegrityConfig.get firebaseappcheck.playIntegrityConfig.update firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaEnterpriseConfig.update firebaseappcheck.recaptchaV3Config.get firebaseappcheck.recaptchaV3Config.update firebaseappcheck.resourcePolicies.get firebaseappcheck.resourcePolicies.update firebaseappcheck.safetyNetConfig.get firebaseappcheck.safetyNetConfig.update firebaseappcheck.services.get firebaseappcheck.services.update
Firebase App Check Service Agent (roles/firebaseappcheck.serviceAgent) Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.	recaptchaenterprise.assessments.* recaptchaenterprise.assessments.annotate recaptchaenterprise.assessments.create serviceusage.services.use
Firebase App Check Token Verifier (roles/firebaseappcheck.tokenVerifier) Access to token verification capabilities for Firebase App Check.	firebaseappcheck.appCheckTokens.verify
Firebase App Check Viewer (roles/firebaseappcheck.viewer) Read-only access for Firebase App Check.	firebaseappcheck.appAttestConfig.get firebaseappcheck.automations.get firebaseappcheck.automations.list firebaseappcheck.debugTokens.get firebaseappcheck.deviceCheckConfig.get firebaseappcheck.playIntegrityConfig.get firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaV3Config.get firebaseappcheck.resourcePolicies.get firebaseappcheck.safetyNetConfig.get firebaseappcheck.services.get

Firebase App Check permissions

Permission	Included in roles
firebaseappcheck.appAttestConfig.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.appAttestConfig.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.appCheckTokens.verify	Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Token Verifier (roles/firebaseappcheck.tokenVerifier)
firebaseappcheck.automations.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.automations.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.automations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.automations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebaseappcheck.automations.resume	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.automations.suspend	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.automations.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.debugTokens.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.debugTokens.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.deviceCheckConfig.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.deviceCheckConfig.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.playIntegrityConfig.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.playIntegrityConfig.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.recaptchaEnterpriseConfig.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.recaptchaEnterpriseConfig.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.recaptchaV3Config.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.recaptchaV3Config.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.resourcePolicies.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser) OAuth Config Editor (roles/oauthconfig.editor) OAuth Config Viewer (roles/oauthconfig.viewer)
firebaseappcheck.resourcePolicies.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin) OAuth Config Editor (roles/oauthconfig.editor)
firebaseappcheck.safetyNetConfig.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.safetyNetConfig.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)
firebaseappcheck.services.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase App Check Admin (roles/firebaseappcheck.admin) Firebase App Check Viewer (roles/firebaseappcheck.viewer) Support User (roles/iam.supportUser)
firebaseappcheck.services.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase App Check Admin (roles/firebaseappcheck.admin)