Firebase Realtime Database roles and permissions

This page lists the IAM roles and permissions for Firebase Realtime Database. To search through all roles and permissions, see the role and permission index.

Firebase Realtime Database roles

Role	Permissions
Firebase Realtime Database Admin (roles/firebasedatabase.admin) Full read/write access to Firebase Realtime Database resources.	firebase.clients.get firebase.clients.list firebase.projects.get firebasedatabase.* firebasedatabase.instances.create firebasedatabase.instances.delete firebasedatabase.instances.disable firebasedatabase.instances.get firebasedatabase.instances.list firebasedatabase.instances.reenable firebasedatabase.instances.undelete firebasedatabase.instances.update resourcemanager.projects.get resourcemanager.projects.list
Firebase Realtime Database Service Agent (roles/firebasedatabase.serviceAgent) Access to publish triggers Warning: Do not grant service agent roles to any principals except service agents.	pubsub.topics.publish serviceusage.services.use
Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Read-only access to Firebase Realtime Database resources.	firebase.clients.get firebase.clients.list firebase.projects.get firebasedatabase.instances.get firebasedatabase.instances.list resourcemanager.projects.get resourcemanager.projects.list

Firebase Realtime Database permissions

Permission	Included in roles
firebasedatabase.instances.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Realtime Database Admin (roles/firebasedatabase.admin)
firebasedatabase.instances.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Realtime Database Admin (roles/firebasedatabase.admin)
firebasedatabase.instances.disable	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Realtime Database Admin (roles/firebasedatabase.admin)
firebasedatabase.instances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)
firebasedatabase.instances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebasedatabase.instances.reenable	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Realtime Database Admin (roles/firebasedatabase.admin)
firebasedatabase.instances.undelete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Realtime Database Admin (roles/firebasedatabase.admin)
firebasedatabase.instances.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent)