Firebase App Hosting roles and permissions

This page lists the IAM roles and permissions for Firebase App Hosting. To search through all roles and permissions, see the role and permission index.

Firebase App Hosting roles

Role	Permissions
Firebase App Hosting Admin ^Beta (roles/firebaseapphosting.admin) Full access to Firebase App Hosting API resources.	firebaseapphosting.* firebaseapphosting.backends.create firebaseapphosting.backends.delete firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.backends.update firebaseapphosting.builds.create firebaseapphosting.builds.delete firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.domains.create firebaseapphosting.domains.delete firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.domains.update firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.cancel firebaseapphosting.operations.delete firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.create firebaseapphosting.rollouts.delete firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.rollouts.update firebaseapphosting.traffic.get firebaseapphosting.traffic.update resourcemanager.projects.get resourcemanager.projects.list
Firebase App Hosting Compute Runner ^Beta (roles/firebaseapphosting.computeRunner) Contains the basic necessary permissions for building and running Apps on Firebase App Hosting. Gives access to get and update App Hosting builds, upload artifacts to Artifact Registry and Storage, write logs. Intended to be granted to the user-supplied App Hosting Compute service account.	artifactregistry.aptartifacts.create artifactregistry.attachments.create artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.files.update artifactregistry.files.upload artifactregistry.kfpartifacts.create artifactregistry.locations.* artifactregistry.locations.get artifactregistry.locations.list artifactregistry.mavenartifacts.* artifactregistry.mavenartifacts.get artifactregistry.mavenartifacts.list artifactregistry.npmpackages.* artifactregistry.npmpackages.get artifactregistry.npmpackages.list artifactregistry.packages.get artifactregistry.packages.list artifactregistry.packages.update artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.pythonpackages.get artifactregistry.pythonpackages.list artifactregistry.repositories.createOnPush artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.repositories.uploadArtifacts artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.create artifactregistry.tags.get artifactregistry.tags.list artifactregistry.tags.update artifactregistry.versions.get artifactregistry.versions.list artifactregistry.yumartifacts.create cloudtrace.traces.patch developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.get firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.locations.* firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get logging.logEntries.create logging.logEntries.route monitoring.metricDescriptors.create monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.delete storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.setRetention storage.objects.update telemetry.traces.write
Firebase App Hosting Developer ^Beta (roles/firebaseapphosting.developer) Grants read & update access to Firebase App Hosting backend, builds, and releases resources, plus permission to invoke the backend, but doesn't allow for new backends to be created.	firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.backends.update firebaseapphosting.builds.* firebaseapphosting.builds.create firebaseapphosting.builds.delete firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.locations.* firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.* firebaseapphosting.operations.cancel firebaseapphosting.operations.delete firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.* firebaseapphosting.rollouts.create firebaseapphosting.rollouts.delete firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.rollouts.update firebaseapphosting.traffic.* firebaseapphosting.traffic.get firebaseapphosting.traffic.update resourcemanager.projects.get resourcemanager.projects.list
Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent) Gives Firebase App Hosting access to resource for Building & Deploying Backends. Warning: Do not grant service agent roles to any principals except service agents.	artifactregistry.dockerimages.* artifactregistry.dockerimages.get artifactregistry.dockerimages.list artifactregistry.repositories.create artifactregistry.repositories.delete artifactregistry.repositories.deleteArtifacts artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.update cloudbuild.builds.create cloudbuild.builds.get cloudbuild.builds.update cloudbuild.connections.get cloudbuild.operations.get cloudbuild.repositories.accessReadToken cloudbuild.repositories.accessReadWriteToken cloudbuild.repositories.get developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.fetchReadWriteToken developerconnect.gitRepositoryLinks.get firebaseapphosting.backends.create firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.backends.update firebaseapphosting.builds.create firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.operations.cancel firebaseapphosting.operations.get firebaseapphosting.rollouts.create firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.rollouts.update firebaseapphosting.traffic.* firebaseapphosting.traffic.get firebaseapphosting.traffic.update iam.serviceAccounts.actAs run.operations.delete run.operations.get run.revisions.delete run.revisions.get run.routes.get run.routes.invoke run.services.create run.services.delete run.services.get run.services.update serviceusage.services.use
Firebase App Hosting Viewer ^Beta (roles/firebaseapphosting.viewer) Grants readonly access to Firebase App Hosting resources, but not permission to invoke the backend. Intended for auditors, PMs, ect. Includes minimal viewer permissions for Firebase Console.	firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.locations.* firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get resourcemanager.projects.get resourcemanager.projects.list

Firebase App Hosting permissions

Permission	Included in roles
firebaseapphosting.backends.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.backends.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin)
firebaseapphosting.backends.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.backends.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.backends.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.builds.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.builds.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer)
firebaseapphosting.builds.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.builds.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.builds.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.domains.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebaseapphosting.domains.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin)
firebaseapphosting.domains.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebaseapphosting.domains.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebaseapphosting.domains.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebaseapphosting.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser)
firebaseapphosting.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebaseapphosting.operations.cancel	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.operations.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer)
firebaseapphosting.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebaseapphosting.rollouts.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.rollouts.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer)
firebaseapphosting.rollouts.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.rollouts.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.rollouts.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.traffic.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Viewer (roles/firebase.viewer) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Compute Runner (roles/firebaseapphosting.computeRunner) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Firebase App Hosting Viewer (roles/firebaseapphosting.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)
firebaseapphosting.traffic.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase App Hosting Admin (roles/firebaseapphosting.admin) Firebase App Hosting Developer (roles/firebaseapphosting.developer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (roles/firebaseapphosting.serviceAgent)