Firebase Data Connect roles and permissions

This page lists the IAM roles and permissions for Firebase Data Connect. To search through all roles and permissions, see the role and permission index.

Firebase Data Connect roles

Role	Permissions
Firebase Data Connect API Admin ^Beta (roles/firebasedataconnect.admin) Full access to Firebase Data Connect API resources, including data.	firebasedataconnect.* firebasedataconnect.connectorRevisions.delete firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.create firebasedataconnect.connectors.delete firebasedataconnect.connectors.get firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.connectors.list firebasedataconnect.connectors.update firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.cancel firebasedataconnect.operations.delete firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.delete firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.create firebasedataconnect.schemas.delete firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.schemas.update firebasedataconnect.services.create firebasedataconnect.services.delete firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebasedataconnect.services.update resourcemanager.projects.get resourcemanager.projects.list
Firebase Data Connect API Data Admin ^Beta (roles/firebasedataconnect.dataAdmin) Full access to data sources.	firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.introspectGraphql
Firebase Data Connect API Data Viewer ^Beta (roles/firebasedataconnect.dataViewer) Readonly access to data sources.	firebasedataconnect.connectors.impersonateQuery firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.introspectGraphql
Firebase Data Connect Service Agent (roles/firebasedataconnect.serviceAgent) Gives Firebase Data Connect access to administer Cloud SQL instances. Warning: Do not grant service agent roles to any principals except service agents.	cloudsql.databases.create cloudsql.databases.get cloudsql.instances.connect cloudsql.instances.get cloudsql.instances.login cloudsql.users.create cloudsql.users.get serviceusage.services.use
Firebase Data Connect API Viewer ^Beta (roles/firebasedataconnect.viewer) Readonly access to Firebase Data Connect API resources. This role does not grant any access to data.	firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.get firebasedataconnect.connectors.list firebasedataconnect.locations.* firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list resourcemanager.projects.get resourcemanager.projects.list

Firebase Data Connect permissions

Permission	Included in roles
firebasedataconnect.connectorRevisions.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.connectorRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser)
firebasedataconnect.connectorRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebasedataconnect.connectors.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.connectors.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.connectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser)
firebasedataconnect.connectors.impersonateMutation	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)
firebasedataconnect.connectors.impersonateQuery	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer)
firebasedataconnect.connectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebasedataconnect.connectors.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebasedataconnect.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebasedataconnect.operations.cancel	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.operations.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebasedataconnect.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebasedataconnect.schemaRevisions.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.schemaRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser)
firebasedataconnect.schemaRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebasedataconnect.schemas.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.schemas.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.schemas.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser)
firebasedataconnect.schemas.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebasedataconnect.schemas.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.services.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)
firebasedataconnect.services.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)
firebasedataconnect.services.executeGraphql	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)
firebasedataconnect.services.executeGraphqlRead	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer)
firebasedataconnect.services.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser)
firebasedataconnect.services.introspectGraphql	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Support User (roles/iam.supportUser)
firebasedataconnect.services.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Auditor (roles/iam.securityAuditor) Security Reviewer (roles/iam.securityReviewer) Support User (roles/iam.supportUser)
firebasedataconnect.services.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent) Firebase Data Connect API Admin (roles/firebasedataconnect.admin)