Firebase roles and permissions

This page lists the IAM roles and permissions for Firebase. To search through all roles and permissions, see the role and permission index.

Firebase roles

Role Permissions

Role	Permissions
Firebase Admin (`roles/firebase.admin`) Full access to Firebase products.	`apikeys.keys.get` `apikeys.keys.getKeyString` `apikeys.keys.list` `apikeys.keys.lookup` `appengine.applications.get` `artifactregistry.attachments.get` `artifactregistry.attachments.list` `artifactregistry.dockerimages.` `artifactregistry.dockerimages.get` `artifactregistry.dockerimages.list` `artifactregistry.files.download` `artifactregistry.files.get` `artifactregistry.files.list` `artifactregistry.locations.` `artifactregistry.locations.get` `artifactregistry.locations.list` `artifactregistry.mavenartifacts.` `artifactregistry.mavenartifacts.get` `artifactregistry.mavenartifacts.list` `artifactregistry.npmpackages.` `artifactregistry.npmpackages.get` `artifactregistry.npmpackages.list` `artifactregistry.packages.get` `artifactregistry.packages.list` `artifactregistry.projectsettings.get` `artifactregistry.pythonpackages.` `artifactregistry.pythonpackages.get` `artifactregistry.pythonpackages.list` `artifactregistry.repositories.downloadArtifacts` `artifactregistry.repositories.exportArtifacts` `artifactregistry.repositories.get` `artifactregistry.repositories.list` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `artifactregistry.repositories.readViaVirtualRepository` `artifactregistry.rules.get` `artifactregistry.rules.list` `artifactregistry.tags.get` `artifactregistry.tags.list` `artifactregistry.versions.get` `artifactregistry.versions.list` `automl.` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.getIamPolicy` `automl.datasets.import` `automl.datasets.list` `automl.datasets.setIamPolicy` `automl.datasets.update` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.getIamPolicy` `automl.locations.list` `automl.locations.setIamPolicy` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.getIamPolicy` `automl.models.list` `automl.models.predict` `automl.models.setIamPolicy` `automl.models.undeploy` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `clientauthconfig.brands.get` `clientauthconfig.brands.list` `clientauthconfig.brands.update` `clientauthconfig.clients.create` `clientauthconfig.clients.delete` `clientauthconfig.clients.get` `clientauthconfig.clients.list` `clientauthconfig.clients.update` `cloudasset.assets.searchAllResources` `cloudbuild.builds.get` `cloudbuild.builds.list` `cloudbuild.locations.` `cloudbuild.locations.get` `cloudbuild.locations.list` `cloudbuild.operations.` `cloudbuild.operations.get` `cloudbuild.operations.list` `cloudconfig.` `cloudconfig.configs.get` `cloudconfig.configs.update` `cloudfunctions.` `cloudfunctions.functions.call` `cloudfunctions.functions.create` `cloudfunctions.functions.delete` `cloudfunctions.functions.generationUpgrade` `cloudfunctions.functions.get` `cloudfunctions.functions.getIamPolicy` `cloudfunctions.functions.invoke` `cloudfunctions.functions.list` `cloudfunctions.functions.setIamPolicy` `cloudfunctions.functions.sourceCodeGet` `cloudfunctions.functions.sourceCodeSet` `cloudfunctions.functions.update` `cloudfunctions.locations.list` `cloudfunctions.operations.get` `cloudfunctions.operations.list` `cloudkms.keyHandles.` `cloudkms.keyHandles.create` `cloudkms.keyHandles.get` `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `cloudmessaging.messages.create` `cloudnotifications.activities.list` `cloudtestservice.environmentcatalog.get` `cloudtestservice.matrices.` `cloudtestservice.matrices.create` `cloudtestservice.matrices.get` `cloudtestservice.matrices.update` `cloudtoolresults.` `cloudtoolresults.executions.create` `cloudtoolresults.executions.get` `cloudtoolresults.executions.list` `cloudtoolresults.executions.update` `cloudtoolresults.histories.create` `cloudtoolresults.histories.get` `cloudtoolresults.histories.list` `cloudtoolresults.settings.create` `cloudtoolresults.settings.get` `cloudtoolresults.settings.update` `cloudtoolresults.steps.create` `cloudtoolresults.steps.get` `cloudtoolresults.steps.list` `cloudtoolresults.steps.update` `databasesconsole.locations.` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.studioQueries.` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.get` `databasesconsole.studioQueries.list` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `datastore.` `datastore.backupSchedules.create` `datastore.backupSchedules.delete` `datastore.backupSchedules.get` `datastore.backupSchedules.list` `datastore.backupSchedules.update` `datastore.backups.delete` `datastore.backups.get` `datastore.backups.list` `datastore.backups.restoreDatabase` `datastore.databases.bulkDelete` `datastore.databases.clone` `datastore.databases.create` `datastore.databases.createTagBinding` `datastore.databases.delete` `datastore.databases.deleteTagBinding` `datastore.databases.export` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.import` `datastore.databases.list` `datastore.databases.listEffectiveTags` `datastore.databases.listTagBindings` `datastore.databases.update` `datastore.entities.allocateIds` `datastore.entities.create` `datastore.entities.delete` `datastore.entities.get` `datastore.entities.list` `datastore.entities.update` `datastore.indexes.create` `datastore.indexes.delete` `datastore.indexes.get` `datastore.indexes.list` `datastore.indexes.update` `datastore.insights.get` `datastore.keyVisualizerScans.get` `datastore.keyVisualizerScans.list` `datastore.locations.get` `datastore.locations.list` `datastore.namespaces.get` `datastore.namespaces.list` `datastore.operations.cancel` `datastore.operations.delete` `datastore.operations.get` `datastore.operations.list` `datastore.statistics.get` `datastore.statistics.list` `datastore.userCreds.create` `datastore.userCreds.delete` `datastore.userCreds.get` `datastore.userCreds.list` `datastore.userCreds.update` `errorreporting.groups.list` `eventarc.` `eventarc.channelConnections.create` `eventarc.channelConnections.delete` `eventarc.channelConnections.get` `eventarc.channelConnections.getIamPolicy` `eventarc.channelConnections.list` `eventarc.channelConnections.publish` `eventarc.channelConnections.setIamPolicy` `eventarc.channels.attach` `eventarc.channels.create` `eventarc.channels.delete` `eventarc.channels.get` `eventarc.channels.getIamPolicy` `eventarc.channels.list` `eventarc.channels.publish` `eventarc.channels.setIamPolicy` `eventarc.channels.undelete` `eventarc.channels.update` `eventarc.enrollments.create` `eventarc.enrollments.delete` `eventarc.enrollments.get` `eventarc.enrollments.getIamPolicy` `eventarc.enrollments.list` `eventarc.enrollments.setIamPolicy` `eventarc.enrollments.update` `eventarc.events.receiveAuditLogWritten` `eventarc.events.receiveEvent` `eventarc.googleApiSources.create` `eventarc.googleApiSources.delete` `eventarc.googleApiSources.get` `eventarc.googleApiSources.getIamPolicy` `eventarc.googleApiSources.list` `eventarc.googleApiSources.setIamPolicy` `eventarc.googleApiSources.update` `eventarc.googleChannelConfigs.get` `eventarc.googleChannelConfigs.update` `eventarc.kafkaSources.create` `eventarc.kafkaSources.delete` `eventarc.kafkaSources.get` `eventarc.kafkaSources.getIamPolicy` `eventarc.kafkaSources.list` `eventarc.kafkaSources.setIamPolicy` `eventarc.locations.get` `eventarc.locations.list` `eventarc.messageBuses.create` `eventarc.messageBuses.delete` `eventarc.messageBuses.get` `eventarc.messageBuses.getIamPolicy` `eventarc.messageBuses.list` `eventarc.messageBuses.publish` `eventarc.messageBuses.setIamPolicy` `eventarc.messageBuses.update` `eventarc.messageBuses.use` `eventarc.multiProjectSources.collectGoogleApiEvents` `eventarc.operations.cancel` `eventarc.operations.delete` `eventarc.operations.get` `eventarc.operations.list` `eventarc.pipelines.create` `eventarc.pipelines.delete` `eventarc.pipelines.get` `eventarc.pipelines.getIamPolicy` `eventarc.pipelines.list` `eventarc.pipelines.setIamPolicy` `eventarc.pipelines.update` `eventarc.providers.get` `eventarc.providers.list` `eventarc.triggers.create` `eventarc.triggers.delete` `eventarc.triggers.get` `eventarc.triggers.getIamPolicy` `eventarc.triggers.list` `eventarc.triggers.setIamPolicy` `eventarc.triggers.undelete` `eventarc.triggers.update` `fcmdata.deliverydata.list` `firebase.` `firebase.billingPlans.get` `firebase.billingPlans.update` `firebase.clients.create` `firebase.clients.delete` `firebase.clients.get` `firebase.clients.list` `firebase.clients.undelete` `firebase.clients.update` `firebase.links.create` `firebase.links.delete` `firebase.links.list` `firebase.links.update` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.playLinks.update` `firebase.projects.delete` `firebase.projects.get` `firebase.projects.update` `firebaseabt.` `firebaseabt.experimentresults.get` `firebaseabt.experiments.create` `firebaseabt.experiments.delete` `firebaseabt.experiments.get` `firebaseabt.experiments.list` `firebaseabt.experiments.update` `firebaseabt.projectmetadata.get` `firebaseanalytics.` `firebaseanalytics.resources.googleAnalyticsEdit` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseappcheck.` `firebaseappcheck.appAttestConfig.get` `firebaseappcheck.appAttestConfig.update` `firebaseappcheck.appCheckTokens.verify` `firebaseappcheck.automations.create` `firebaseappcheck.automations.delete` `firebaseappcheck.automations.get` `firebaseappcheck.automations.list` `firebaseappcheck.automations.resume` `firebaseappcheck.automations.suspend` `firebaseappcheck.automations.update` `firebaseappcheck.debugTokens.get` `firebaseappcheck.debugTokens.update` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.deviceCheckConfig.update` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.playIntegrityConfig.update` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.update` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.recaptchaV3Config.update` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.resourcePolicies.update` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.safetyNetConfig.update` `firebaseappcheck.services.get` `firebaseappcheck.services.update` `firebaseappdistro.` `firebaseappdistro.groups.list` `firebaseappdistro.groups.update` `firebaseappdistro.releases.list` `firebaseappdistro.releases.update` `firebaseappdistro.testers.list` `firebaseappdistro.testers.update` `firebaseapphosting.` `firebaseapphosting.backends.create` `firebaseapphosting.backends.delete` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.backends.update` `firebaseapphosting.builds.create` `firebaseapphosting.builds.delete` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.builds.update` `firebaseapphosting.domains.create` `firebaseapphosting.domains.delete` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.domains.update` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.cancel` `firebaseapphosting.operations.delete` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.create` `firebaseapphosting.rollouts.delete` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.rollouts.update` `firebaseapphosting.traffic.get` `firebaseapphosting.traffic.update` `firebaseauth.` `firebaseauth.configs.create` `firebaseauth.configs.get` `firebaseauth.configs.getHashConfig` `firebaseauth.configs.getSecret` `firebaseauth.configs.update` `firebaseauth.users.create` `firebaseauth.users.createSession` `firebaseauth.users.delete` `firebaseauth.users.get` `firebaseauth.users.sendEmail` `firebaseauth.users.update` `firebasecrash.` `firebasecrash.issues.update` `firebasecrash.reports.get` `firebasecrashlytics.` `firebasecrashlytics.config.get` `firebasecrashlytics.config.update` `firebasecrashlytics.data.get` `firebasecrashlytics.issues.get` `firebasecrashlytics.issues.list` `firebasecrashlytics.issues.update` `firebasecrashlytics.sessions.get` `firebasedatabase.` `firebasedatabase.instances.create` `firebasedatabase.instances.delete` `firebasedatabase.instances.disable` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `firebasedatabase.instances.reenable` `firebasedatabase.instances.undelete` `firebasedatabase.instances.update` `firebasedataconnect.` `firebasedataconnect.connectorRevisions.delete` `firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.create` `firebasedataconnect.connectors.delete` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.impersonateMutation` `firebasedataconnect.connectors.impersonateQuery` `firebasedataconnect.connectors.list` `firebasedataconnect.connectors.update` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.cancel` `firebasedataconnect.operations.delete` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.delete` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.create` `firebasedataconnect.schemas.delete` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.schemas.update` `firebasedataconnect.services.create` `firebasedataconnect.services.delete` `firebasedataconnect.services.executeGraphql` `firebasedataconnect.services.executeGraphqlRead` `firebasedataconnect.services.get` `firebasedataconnect.services.introspectGraphql` `firebasedataconnect.services.list` `firebasedataconnect.services.update` `firebasedynamiclinks.` `firebasedynamiclinks.destinations.list` `firebasedynamiclinks.destinations.update` `firebasedynamiclinks.domains.create` `firebasedynamiclinks.domains.delete` `firebasedynamiclinks.domains.get` `firebasedynamiclinks.domains.list` `firebasedynamiclinks.domains.update` `firebasedynamiclinks.links.create` `firebasedynamiclinks.links.get` `firebasedynamiclinks.links.list` `firebasedynamiclinks.links.update` `firebasedynamiclinks.stats.get` `firebaseextensions.` `firebaseextensions.configs.create` `firebaseextensions.configs.delete` `firebaseextensions.configs.list` `firebaseextensions.configs.update` `firebaseextensionspublisher.` `firebaseextensionspublisher.extensions.create` `firebaseextensionspublisher.extensions.delete` `firebaseextensionspublisher.extensions.get` `firebaseextensionspublisher.extensions.list` `firebasehosting.` `firebasehosting.sites.create` `firebasehosting.sites.delete` `firebasehosting.sites.get` `firebasehosting.sites.list` `firebasehosting.sites.update` `firebaseinappmessaging.` `firebaseinappmessaging.campaigns.create` `firebaseinappmessaging.campaigns.delete` `firebaseinappmessaging.campaigns.get` `firebaseinappmessaging.campaigns.list` `firebaseinappmessaging.campaigns.update` `firebasemessagingcampaigns.` `firebasemessagingcampaigns.campaigns.create` `firebasemessagingcampaigns.campaigns.delete` `firebasemessagingcampaigns.campaigns.get` `firebasemessagingcampaigns.campaigns.list` `firebasemessagingcampaigns.campaigns.start` `firebasemessagingcampaigns.campaigns.stop` `firebasemessagingcampaigns.campaigns.update` `firebaseml.` `firebaseml.models.create` `firebaseml.models.delete` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.models.update` `firebaseml.modelversions.create` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `firebaseml.modelversions.update` `firebasenotifications.` `firebasenotifications.messages.create` `firebasenotifications.messages.delete` `firebasenotifications.messages.get` `firebasenotifications.messages.list` `firebasenotifications.messages.update` `firebaseperformance.` `firebaseperformance.config.update` `firebaseperformance.data.get` `firebaserules.` `firebaserules.releases.create` `firebaserules.releases.delete` `firebaserules.releases.get` `firebaserules.releases.getExecutable` `firebaserules.releases.list` `firebaserules.releases.update` `firebaserules.rulesets.create` `firebaserules.rulesets.delete` `firebaserules.rulesets.get` `firebaserules.rulesets.list` `firebaserules.rulesets.test` `firebasestorage.` `firebasestorage.buckets.addFirebase` `firebasestorage.buckets.get` `firebasestorage.buckets.list` `firebasestorage.buckets.removeFirebase` `firebasestorage.defaultBucket.create` `firebasestorage.defaultBucket.delete` `firebasestorage.defaultBucket.get` `firebasevertexai.` `firebasevertexai.configs.get` `firebasevertexai.configs.update` `firebasevertexai.promptTemplates.create` `firebasevertexai.promptTemplates.delete` `firebasevertexai.promptTemplates.get` `firebasevertexai.promptTemplates.list` `firebasevertexai.promptTemplates.update` `logging.logEntries.list` `monitoring.timeSeries.` `monitoring.timeSeries.create` `monitoring.timeSeries.list` `oauthconfig.verification.get` `orgpolicy.policy.get` `recommender.cloudFunctionsPerformanceInsights.` `recommender.cloudFunctionsPerformanceInsights.get` `recommender.cloudFunctionsPerformanceInsights.list` `recommender.cloudFunctionsPerformanceInsights.update` `recommender.cloudFunctionsPerformanceRecommendations.` `recommender.cloudFunctionsPerformanceRecommendations.get` `recommender.cloudFunctionsPerformanceRecommendations.list` `recommender.cloudFunctionsPerformanceRecommendations.update` `recommender.iamPolicyInsights.` `recommender.iamPolicyInsights.get` `recommender.iamPolicyInsights.list` `recommender.iamPolicyInsights.update` `recommender.iamPolicyRecommendations.` `recommender.iamPolicyRecommendations.get` `recommender.iamPolicyRecommendations.list` `recommender.iamPolicyRecommendations.update` `recommender.locations.` `recommender.locations.get` `recommender.locations.list` `recommender.runServiceCostInsights.` `recommender.runServiceCostInsights.get` `recommender.runServiceCostInsights.list` `recommender.runServiceCostInsights.update` `recommender.runServiceCostRecommendations.` `recommender.runServiceCostRecommendations.get` `recommender.runServiceCostRecommendations.list` `recommender.runServiceCostRecommendations.update` `recommender.runServiceIdentityInsights.` `recommender.runServiceIdentityInsights.get` `recommender.runServiceIdentityInsights.list` `recommender.runServiceIdentityInsights.update` `recommender.runServiceIdentityRecommendations.` `recommender.runServiceIdentityRecommendations.get` `recommender.runServiceIdentityRecommendations.list` `recommender.runServiceIdentityRecommendations.update` `recommender.runServicePerformanceInsights.` `recommender.runServicePerformanceInsights.get` `recommender.runServicePerformanceInsights.list` `recommender.runServicePerformanceInsights.update` `recommender.runServicePerformanceRecommendations.` `recommender.runServicePerformanceRecommendations.get` `recommender.runServicePerformanceRecommendations.list` `recommender.runServicePerformanceRecommendations.update` `recommender.runServiceSecurityInsights.` `recommender.runServiceSecurityInsights.get` `recommender.runServiceSecurityInsights.list` `recommender.runServiceSecurityInsights.update` `recommender.runServiceSecurityRecommendations.` `recommender.runServiceSecurityRecommendations.get` `recommender.runServiceSecurityRecommendations.list` `recommender.runServiceSecurityRecommendations.update` `recommender.storageBucketSoftDeleteInsights.` `recommender.storageBucketSoftDeleteInsights.get` `recommender.storageBucketSoftDeleteInsights.list` `recommender.storageBucketSoftDeleteInsights.update` `recommender.storageBucketSoftDeleteRecommendations.` `recommender.storageBucketSoftDeleteRecommendations.get` `recommender.storageBucketSoftDeleteRecommendations.list` `recommender.storageBucketSoftDeleteRecommendations.update` `remotebuildexecution.blobs.get` `resourcemanager.hierarchyNodes.listEffectiveTags` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `run.` `run.configurations.get` `run.configurations.list` `run.executions.cancel` `run.executions.delete` `run.executions.get` `run.executions.list` `run.jobs.create` `run.jobs.createTagBinding` `run.jobs.delete` `run.jobs.deleteTagBinding` `run.jobs.get` `run.jobs.getIamPolicy` `run.jobs.list` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.jobs.run` `run.jobs.runWithOverrides` `run.jobs.setIamPolicy` `run.jobs.update` `run.locations.list` `run.operations.delete` `run.operations.get` `run.operations.list` `run.revisions.delete` `run.revisions.get` `run.revisions.list` `run.routes.get` `run.routes.invoke` `run.routes.list` `run.services.create` `run.services.createTagBinding` `run.services.delete` `run.services.deleteTagBinding` `run.services.get` `run.services.getIamPolicy` `run.services.list` `run.services.listEffectiveTags` `run.services.listTagBindings` `run.services.setIamPolicy` `run.services.update` `run.tasks.get` `run.tasks.list` `run.workerpools.create` `run.workerpools.delete` `run.workerpools.get` `run.workerpools.getIamPolicy` `run.workerpools.list` `run.workerpools.setIamPolicy` `run.workerpools.update` `runtimeconfig.configs.create` `runtimeconfig.configs.delete` `runtimeconfig.configs.get` `runtimeconfig.configs.list` `runtimeconfig.configs.update` `runtimeconfig.operations.` `runtimeconfig.operations.get` `runtimeconfig.operations.list` `runtimeconfig.variables.create` `runtimeconfig.variables.delete` `runtimeconfig.variables.get` `runtimeconfig.variables.list` `runtimeconfig.variables.update` `runtimeconfig.variables.watch` `runtimeconfig.waiters.create` `runtimeconfig.waiters.delete` `runtimeconfig.waiters.get` `runtimeconfig.waiters.list` `runtimeconfig.waiters.update` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test` `storage.anywhereCaches.` `storage.anywhereCaches.create` `storage.anywhereCaches.disable` `storage.anywhereCaches.get` `storage.anywhereCaches.list` `storage.anywhereCaches.pause` `storage.anywhereCaches.resume` `storage.anywhereCaches.update` `storage.bucketOperations.` `storage.bucketOperations.cancel` `storage.bucketOperations.get` `storage.bucketOperations.list` `storage.buckets.` `storage.buckets.create` `storage.buckets.createTagBinding` `storage.buckets.delete` `storage.buckets.deleteTagBinding` `storage.buckets.enableObjectRetention` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.getIpFilter` `storage.buckets.getObjectInsights` `storage.buckets.list` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `storage.buckets.relocate` `storage.buckets.restore` `storage.buckets.setIamPolicy` `storage.buckets.setIpFilter` `storage.buckets.update` `storage.folders.` `storage.folders.create` `storage.folders.delete` `storage.folders.get` `storage.folders.list` `storage.folders.rename` `storage.intelligenceConfigs.` `storage.intelligenceConfigs.get` `storage.intelligenceConfigs.update` `storage.managedFolders.` `storage.managedFolders.create` `storage.managedFolders.delete` `storage.managedFolders.get` `storage.managedFolders.getIamPolicy` `storage.managedFolders.list` `storage.managedFolders.setIamPolicy` `storage.multipartUploads.` `storage.multipartUploads.abort` `storage.multipartUploads.create` `storage.multipartUploads.list` `storage.multipartUploads.listParts` `storage.objects.` `storage.objects.create` `storage.objects.createContext` `storage.objects.delete` `storage.objects.deleteContext` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `storage.objects.move` `storage.objects.overrideUnlockedRetention` `storage.objects.restore` `storage.objects.setIamPolicy` `storage.objects.setRetention` `storage.objects.update` `storage.objects.updateContext` `storagebatchoperations.` `storagebatchoperations.jobs.cancel` `storagebatchoperations.jobs.create` `storagebatchoperations.jobs.delete` `storagebatchoperations.jobs.get` `storagebatchoperations.jobs.list` `storagebatchoperations.locations.get` `storagebatchoperations.locations.list` `storagebatchoperations.operations.cancel` `storagebatchoperations.operations.delete` `storagebatchoperations.operations.get` `storagebatchoperations.operations.list`
Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Full access to Google Analytics for Firebase.	`cloudnotifications.activities.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseanalytics.*` `firebaseanalytics.resources.googleAnalyticsEdit` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseextensions.configs.list` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list`
Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Read access to Google Analytics for Firebase.	`cloudnotifications.activities.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseextensions.configs.list` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list`
Firebase App Distribution Admin SDK Service Agent (`roles/firebase.appDistributionSdkServiceAgent`) Read and write access to Firebase App Distribution with the Admin SDK Warning: Do not grant service agent roles to any principals except service agents.	`firebaseappdistro.*` `firebaseappdistro.groups.list` `firebaseappdistro.groups.update` `firebaseappdistro.releases.list` `firebaseappdistro.releases.update` `firebaseappdistro.testers.list` `firebaseappdistro.testers.update`
Firebase Develop Admin (`roles/firebase.developAdmin`) Full access to Firebase Develop products and Analytics.	`apikeys.keys.get` `apikeys.keys.getKeyString` `apikeys.keys.list` `apikeys.keys.lookup` `appengine.applications.get` `artifactregistry.attachments.get` `artifactregistry.attachments.list` `artifactregistry.dockerimages.` `artifactregistry.dockerimages.get` `artifactregistry.dockerimages.list` `artifactregistry.files.download` `artifactregistry.files.get` `artifactregistry.files.list` `artifactregistry.locations.` `artifactregistry.locations.get` `artifactregistry.locations.list` `artifactregistry.mavenartifacts.` `artifactregistry.mavenartifacts.get` `artifactregistry.mavenartifacts.list` `artifactregistry.npmpackages.` `artifactregistry.npmpackages.get` `artifactregistry.npmpackages.list` `artifactregistry.packages.get` `artifactregistry.packages.list` `artifactregistry.projectsettings.get` `artifactregistry.pythonpackages.` `artifactregistry.pythonpackages.get` `artifactregistry.pythonpackages.list` `artifactregistry.repositories.downloadArtifacts` `artifactregistry.repositories.exportArtifacts` `artifactregistry.repositories.get` `artifactregistry.repositories.list` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `artifactregistry.repositories.readViaVirtualRepository` `artifactregistry.rules.get` `artifactregistry.rules.list` `artifactregistry.tags.get` `artifactregistry.tags.list` `artifactregistry.versions.get` `artifactregistry.versions.list` `automl.` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.getIamPolicy` `automl.datasets.import` `automl.datasets.list` `automl.datasets.setIamPolicy` `automl.datasets.update` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.getIamPolicy` `automl.locations.list` `automl.locations.setIamPolicy` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.getIamPolicy` `automl.models.list` `automl.models.predict` `automl.models.setIamPolicy` `automl.models.undeploy` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `clientauthconfig.brands.get` `clientauthconfig.brands.list` `clientauthconfig.brands.update` `clientauthconfig.clients.get` `clientauthconfig.clients.list` `cloudasset.assets.searchAllResources` `cloudbuild.builds.get` `cloudbuild.builds.list` `cloudbuild.locations.` `cloudbuild.locations.get` `cloudbuild.locations.list` `cloudbuild.operations.` `cloudbuild.operations.get` `cloudbuild.operations.list` `cloudfunctions.` `cloudfunctions.functions.call` `cloudfunctions.functions.create` `cloudfunctions.functions.delete` `cloudfunctions.functions.generationUpgrade` `cloudfunctions.functions.get` `cloudfunctions.functions.getIamPolicy` `cloudfunctions.functions.invoke` `cloudfunctions.functions.list` `cloudfunctions.functions.setIamPolicy` `cloudfunctions.functions.sourceCodeGet` `cloudfunctions.functions.sourceCodeSet` `cloudfunctions.functions.update` `cloudfunctions.locations.list` `cloudfunctions.operations.get` `cloudfunctions.operations.list` `cloudkms.keyHandles.` `cloudkms.keyHandles.create` `cloudkms.keyHandles.get` `cloudkms.keyHandles.list` `cloudkms.operations.get` `cloudkms.projects.showEffectiveAutokeyConfig` `cloudnotifications.activities.list` `databasesconsole.locations.` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.studioQueries.` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.get` `databasesconsole.studioQueries.list` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `datastore.` `datastore.backupSchedules.create` `datastore.backupSchedules.delete` `datastore.backupSchedules.get` `datastore.backupSchedules.list` `datastore.backupSchedules.update` `datastore.backups.delete` `datastore.backups.get` `datastore.backups.list` `datastore.backups.restoreDatabase` `datastore.databases.bulkDelete` `datastore.databases.clone` `datastore.databases.create` `datastore.databases.createTagBinding` `datastore.databases.delete` `datastore.databases.deleteTagBinding` `datastore.databases.export` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.import` `datastore.databases.list` `datastore.databases.listEffectiveTags` `datastore.databases.listTagBindings` `datastore.databases.update` `datastore.entities.allocateIds` `datastore.entities.create` `datastore.entities.delete` `datastore.entities.get` `datastore.entities.list` `datastore.entities.update` `datastore.indexes.create` `datastore.indexes.delete` `datastore.indexes.get` `datastore.indexes.list` `datastore.indexes.update` `datastore.insights.get` `datastore.keyVisualizerScans.get` `datastore.keyVisualizerScans.list` `datastore.locations.get` `datastore.locations.list` `datastore.namespaces.get` `datastore.namespaces.list` `datastore.operations.cancel` `datastore.operations.delete` `datastore.operations.get` `datastore.operations.list` `datastore.statistics.get` `datastore.statistics.list` `datastore.userCreds.create` `datastore.userCreds.delete` `datastore.userCreds.get` `datastore.userCreds.list` `datastore.userCreds.update` `errorreporting.groups.list` `eventarc.` `eventarc.channelConnections.create` `eventarc.channelConnections.delete` `eventarc.channelConnections.get` `eventarc.channelConnections.getIamPolicy` `eventarc.channelConnections.list` `eventarc.channelConnections.publish` `eventarc.channelConnections.setIamPolicy` `eventarc.channels.attach` `eventarc.channels.create` `eventarc.channels.delete` `eventarc.channels.get` `eventarc.channels.getIamPolicy` `eventarc.channels.list` `eventarc.channels.publish` `eventarc.channels.setIamPolicy` `eventarc.channels.undelete` `eventarc.channels.update` `eventarc.enrollments.create` `eventarc.enrollments.delete` `eventarc.enrollments.get` `eventarc.enrollments.getIamPolicy` `eventarc.enrollments.list` `eventarc.enrollments.setIamPolicy` `eventarc.enrollments.update` `eventarc.events.receiveAuditLogWritten` `eventarc.events.receiveEvent` `eventarc.googleApiSources.create` `eventarc.googleApiSources.delete` `eventarc.googleApiSources.get` `eventarc.googleApiSources.getIamPolicy` `eventarc.googleApiSources.list` `eventarc.googleApiSources.setIamPolicy` `eventarc.googleApiSources.update` `eventarc.googleChannelConfigs.get` `eventarc.googleChannelConfigs.update` `eventarc.kafkaSources.create` `eventarc.kafkaSources.delete` `eventarc.kafkaSources.get` `eventarc.kafkaSources.getIamPolicy` `eventarc.kafkaSources.list` `eventarc.kafkaSources.setIamPolicy` `eventarc.locations.get` `eventarc.locations.list` `eventarc.messageBuses.create` `eventarc.messageBuses.delete` `eventarc.messageBuses.get` `eventarc.messageBuses.getIamPolicy` `eventarc.messageBuses.list` `eventarc.messageBuses.publish` `eventarc.messageBuses.setIamPolicy` `eventarc.messageBuses.update` `eventarc.messageBuses.use` `eventarc.multiProjectSources.collectGoogleApiEvents` `eventarc.operations.cancel` `eventarc.operations.delete` `eventarc.operations.get` `eventarc.operations.list` `eventarc.pipelines.create` `eventarc.pipelines.delete` `eventarc.pipelines.get` `eventarc.pipelines.getIamPolicy` `eventarc.pipelines.list` `eventarc.pipelines.setIamPolicy` `eventarc.pipelines.update` `eventarc.providers.get` `eventarc.providers.list` `eventarc.triggers.create` `eventarc.triggers.delete` `eventarc.triggers.get` `eventarc.triggers.getIamPolicy` `eventarc.triggers.list` `eventarc.triggers.setIamPolicy` `eventarc.triggers.undelete` `eventarc.triggers.update` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseanalytics.` `firebaseanalytics.resources.googleAnalyticsEdit` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseappcheck.` `firebaseappcheck.appAttestConfig.get` `firebaseappcheck.appAttestConfig.update` `firebaseappcheck.appCheckTokens.verify` `firebaseappcheck.automations.create` `firebaseappcheck.automations.delete` `firebaseappcheck.automations.get` `firebaseappcheck.automations.list` `firebaseappcheck.automations.resume` `firebaseappcheck.automations.suspend` `firebaseappcheck.automations.update` `firebaseappcheck.debugTokens.get` `firebaseappcheck.debugTokens.update` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.deviceCheckConfig.update` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.playIntegrityConfig.update` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.update` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.recaptchaV3Config.update` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.resourcePolicies.update` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.safetyNetConfig.update` `firebaseappcheck.services.get` `firebaseappcheck.services.update` `firebaseapphosting.` `firebaseapphosting.backends.create` `firebaseapphosting.backends.delete` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.backends.update` `firebaseapphosting.builds.create` `firebaseapphosting.builds.delete` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.builds.update` `firebaseapphosting.domains.create` `firebaseapphosting.domains.delete` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.domains.update` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.cancel` `firebaseapphosting.operations.delete` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.create` `firebaseapphosting.rollouts.delete` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.rollouts.update` `firebaseapphosting.traffic.get` `firebaseapphosting.traffic.update` `firebaseauth.` `firebaseauth.configs.create` `firebaseauth.configs.get` `firebaseauth.configs.getHashConfig` `firebaseauth.configs.getSecret` `firebaseauth.configs.update` `firebaseauth.users.create` `firebaseauth.users.createSession` `firebaseauth.users.delete` `firebaseauth.users.get` `firebaseauth.users.sendEmail` `firebaseauth.users.update` `firebasedatabase.` `firebasedatabase.instances.create` `firebasedatabase.instances.delete` `firebasedatabase.instances.disable` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `firebasedatabase.instances.reenable` `firebasedatabase.instances.undelete` `firebasedatabase.instances.update` `firebasedataconnect.` `firebasedataconnect.connectorRevisions.delete` `firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.create` `firebasedataconnect.connectors.delete` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.impersonateMutation` `firebasedataconnect.connectors.impersonateQuery` `firebasedataconnect.connectors.list` `firebasedataconnect.connectors.update` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.cancel` `firebasedataconnect.operations.delete` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.delete` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.create` `firebasedataconnect.schemas.delete` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.schemas.update` `firebasedataconnect.services.create` `firebasedataconnect.services.delete` `firebasedataconnect.services.executeGraphql` `firebasedataconnect.services.executeGraphqlRead` `firebasedataconnect.services.get` `firebasedataconnect.services.introspectGraphql` `firebasedataconnect.services.list` `firebasedataconnect.services.update` `firebaseextensions.configs.list` `firebasehosting.` `firebasehosting.sites.create` `firebasehosting.sites.delete` `firebasehosting.sites.get` `firebasehosting.sites.list` `firebasehosting.sites.update` `firebaseml.` `firebaseml.models.create` `firebaseml.models.delete` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.models.update` `firebaseml.modelversions.create` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `firebaseml.modelversions.update` `firebaserules.` `firebaserules.releases.create` `firebaserules.releases.delete` `firebaserules.releases.get` `firebaserules.releases.getExecutable` `firebaserules.releases.list` `firebaserules.releases.update` `firebaserules.rulesets.create` `firebaserules.rulesets.delete` `firebaserules.rulesets.get` `firebaserules.rulesets.list` `firebaserules.rulesets.test` `firebasestorage.` `firebasestorage.buckets.addFirebase` `firebasestorage.buckets.get` `firebasestorage.buckets.list` `firebasestorage.buckets.removeFirebase` `firebasestorage.defaultBucket.create` `firebasestorage.defaultBucket.delete` `firebasestorage.defaultBucket.get` `firebasevertexai.` `firebasevertexai.configs.get` `firebasevertexai.configs.update` `firebasevertexai.promptTemplates.create` `firebasevertexai.promptTemplates.delete` `firebasevertexai.promptTemplates.get` `firebasevertexai.promptTemplates.list` `firebasevertexai.promptTemplates.update` `logging.logEntries.list` `monitoring.timeSeries.` `monitoring.timeSeries.create` `monitoring.timeSeries.list` `oauthconfig.verification.get` `orgpolicy.policy.get` `recommender.cloudFunctionsPerformanceInsights.` `recommender.cloudFunctionsPerformanceInsights.get` `recommender.cloudFunctionsPerformanceInsights.list` `recommender.cloudFunctionsPerformanceInsights.update` `recommender.cloudFunctionsPerformanceRecommendations.` `recommender.cloudFunctionsPerformanceRecommendations.get` `recommender.cloudFunctionsPerformanceRecommendations.list` `recommender.cloudFunctionsPerformanceRecommendations.update` `recommender.iamPolicyInsights.` `recommender.iamPolicyInsights.get` `recommender.iamPolicyInsights.list` `recommender.iamPolicyInsights.update` `recommender.iamPolicyRecommendations.` `recommender.iamPolicyRecommendations.get` `recommender.iamPolicyRecommendations.list` `recommender.iamPolicyRecommendations.update` `recommender.locations.` `recommender.locations.get` `recommender.locations.list` `recommender.runServiceCostInsights.` `recommender.runServiceCostInsights.get` `recommender.runServiceCostInsights.list` `recommender.runServiceCostInsights.update` `recommender.runServiceCostRecommendations.` `recommender.runServiceCostRecommendations.get` `recommender.runServiceCostRecommendations.list` `recommender.runServiceCostRecommendations.update` `recommender.runServiceIdentityInsights.` `recommender.runServiceIdentityInsights.get` `recommender.runServiceIdentityInsights.list` `recommender.runServiceIdentityInsights.update` `recommender.runServiceIdentityRecommendations.` `recommender.runServiceIdentityRecommendations.get` `recommender.runServiceIdentityRecommendations.list` `recommender.runServiceIdentityRecommendations.update` `recommender.runServicePerformanceInsights.` `recommender.runServicePerformanceInsights.get` `recommender.runServicePerformanceInsights.list` `recommender.runServicePerformanceInsights.update` `recommender.runServicePerformanceRecommendations.` `recommender.runServicePerformanceRecommendations.get` `recommender.runServicePerformanceRecommendations.list` `recommender.runServicePerformanceRecommendations.update` `recommender.runServiceSecurityInsights.` `recommender.runServiceSecurityInsights.get` `recommender.runServiceSecurityInsights.list` `recommender.runServiceSecurityInsights.update` `recommender.runServiceSecurityRecommendations.` `recommender.runServiceSecurityRecommendations.get` `recommender.runServiceSecurityRecommendations.list` `recommender.runServiceSecurityRecommendations.update` `recommender.storageBucketSoftDeleteInsights.` `recommender.storageBucketSoftDeleteInsights.get` `recommender.storageBucketSoftDeleteInsights.list` `recommender.storageBucketSoftDeleteInsights.update` `recommender.storageBucketSoftDeleteRecommendations.` `recommender.storageBucketSoftDeleteRecommendations.get` `recommender.storageBucketSoftDeleteRecommendations.list` `recommender.storageBucketSoftDeleteRecommendations.update` `remotebuildexecution.blobs.get` `resourcemanager.hierarchyNodes.listEffectiveTags` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `run.` `run.configurations.get` `run.configurations.list` `run.executions.cancel` `run.executions.delete` `run.executions.get` `run.executions.list` `run.jobs.create` `run.jobs.createTagBinding` `run.jobs.delete` `run.jobs.deleteTagBinding` `run.jobs.get` `run.jobs.getIamPolicy` `run.jobs.list` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.jobs.run` `run.jobs.runWithOverrides` `run.jobs.setIamPolicy` `run.jobs.update` `run.locations.list` `run.operations.delete` `run.operations.get` `run.operations.list` `run.revisions.delete` `run.revisions.get` `run.revisions.list` `run.routes.get` `run.routes.invoke` `run.routes.list` `run.services.create` `run.services.createTagBinding` `run.services.delete` `run.services.deleteTagBinding` `run.services.get` `run.services.getIamPolicy` `run.services.list` `run.services.listEffectiveTags` `run.services.listTagBindings` `run.services.setIamPolicy` `run.services.update` `run.tasks.get` `run.tasks.list` `run.workerpools.create` `run.workerpools.delete` `run.workerpools.get` `run.workerpools.getIamPolicy` `run.workerpools.list` `run.workerpools.setIamPolicy` `run.workerpools.update` `runtimeconfig.configs.create` `runtimeconfig.configs.delete` `runtimeconfig.configs.get` `runtimeconfig.configs.list` `runtimeconfig.configs.update` `runtimeconfig.operations.` `runtimeconfig.operations.get` `runtimeconfig.operations.list` `runtimeconfig.variables.create` `runtimeconfig.variables.delete` `runtimeconfig.variables.get` `runtimeconfig.variables.list` `runtimeconfig.variables.update` `runtimeconfig.variables.watch` `runtimeconfig.waiters.create` `runtimeconfig.waiters.delete` `runtimeconfig.waiters.get` `runtimeconfig.waiters.list` `runtimeconfig.waiters.update` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test` `storage.anywhereCaches.` `storage.anywhereCaches.create` `storage.anywhereCaches.disable` `storage.anywhereCaches.get` `storage.anywhereCaches.list` `storage.anywhereCaches.pause` `storage.anywhereCaches.resume` `storage.anywhereCaches.update` `storage.bucketOperations.` `storage.bucketOperations.cancel` `storage.bucketOperations.get` `storage.bucketOperations.list` `storage.buckets.` `storage.buckets.create` `storage.buckets.createTagBinding` `storage.buckets.delete` `storage.buckets.deleteTagBinding` `storage.buckets.enableObjectRetention` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.getIpFilter` `storage.buckets.getObjectInsights` `storage.buckets.list` `storage.buckets.listEffectiveTags` `storage.buckets.listTagBindings` `storage.buckets.relocate` `storage.buckets.restore` `storage.buckets.setIamPolicy` `storage.buckets.setIpFilter` `storage.buckets.update` `storage.folders.` `storage.folders.create` `storage.folders.delete` `storage.folders.get` `storage.folders.list` `storage.folders.rename` `storage.intelligenceConfigs.` `storage.intelligenceConfigs.get` `storage.intelligenceConfigs.update` `storage.managedFolders.` `storage.managedFolders.create` `storage.managedFolders.delete` `storage.managedFolders.get` `storage.managedFolders.getIamPolicy` `storage.managedFolders.list` `storage.managedFolders.setIamPolicy` `storage.multipartUploads.` `storage.multipartUploads.abort` `storage.multipartUploads.create` `storage.multipartUploads.list` `storage.multipartUploads.listParts` `storage.objects.` `storage.objects.create` `storage.objects.createContext` `storage.objects.delete` `storage.objects.deleteContext` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `storage.objects.move` `storage.objects.overrideUnlockedRetention` `storage.objects.restore` `storage.objects.setIamPolicy` `storage.objects.setRetention` `storage.objects.update` `storage.objects.updateContext` `storagebatchoperations.*` `storagebatchoperations.jobs.cancel` `storagebatchoperations.jobs.create` `storagebatchoperations.jobs.delete` `storagebatchoperations.jobs.get` `storagebatchoperations.jobs.list` `storagebatchoperations.locations.get` `storagebatchoperations.locations.list` `storagebatchoperations.operations.cancel` `storagebatchoperations.operations.delete` `storagebatchoperations.operations.get` `storagebatchoperations.operations.list`
Firebase Develop Viewer (`roles/firebase.developViewer`) Read access to Firebase Develop products and Analytics.	`apikeys.keys.get` `apikeys.keys.list` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotations.list` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.datasets.get` `automl.datasets.list` `automl.examples.get` `automl.examples.list` `automl.files.list` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.get` `automl.models.list` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.get` `automl.tableSpecs.list` `clientauthconfig.brands.get` `clientauthconfig.brands.list` `cloudasset.assets.searchAllResources` `cloudbuild.builds.get` `cloudbuild.builds.list` `cloudbuild.locations.` `cloudbuild.locations.get` `cloudbuild.locations.list` `cloudbuild.operations.` `cloudbuild.operations.get` `cloudbuild.operations.list` `cloudfunctions.functions.get` `cloudfunctions.functions.getIamPolicy` `cloudfunctions.functions.list` `cloudfunctions.locations.list` `cloudfunctions.operations.` `cloudfunctions.operations.get` `cloudfunctions.operations.list` `cloudnotifications.activities.list` `datastore.backups.get` `datastore.backups.list` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.list` `datastore.entities.get` `datastore.entities.list` `datastore.indexes.get` `datastore.indexes.list` `datastore.namespaces.` `datastore.namespaces.get` `datastore.namespaces.list` `datastore.statistics.` `datastore.statistics.get` `datastore.statistics.list` `errorreporting.groups.list` `eventarc.channelConnections.get` `eventarc.channelConnections.getIamPolicy` `eventarc.channelConnections.list` `eventarc.channels.get` `eventarc.channels.getIamPolicy` `eventarc.channels.list` `eventarc.enrollments.get` `eventarc.enrollments.getIamPolicy` `eventarc.enrollments.list` `eventarc.googleApiSources.get` `eventarc.googleApiSources.getIamPolicy` `eventarc.googleApiSources.list` `eventarc.googleChannelConfigs.get` `eventarc.kafkaSources.get` `eventarc.kafkaSources.getIamPolicy` `eventarc.kafkaSources.list` `eventarc.locations.` `eventarc.locations.get` `eventarc.locations.list` `eventarc.messageBuses.get` `eventarc.messageBuses.getIamPolicy` `eventarc.messageBuses.list` `eventarc.messageBuses.use` `eventarc.multiProjectSources.collectGoogleApiEvents` `eventarc.operations.get` `eventarc.operations.list` `eventarc.pipelines.get` `eventarc.pipelines.getIamPolicy` `eventarc.pipelines.list` `eventarc.providers.` `eventarc.providers.get` `eventarc.providers.list` `eventarc.triggers.get` `eventarc.triggers.getIamPolicy` `eventarc.triggers.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseappcheck.appAttestConfig.get` `firebaseappcheck.automations.get` `firebaseappcheck.automations.list` `firebaseappcheck.debugTokens.get` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.services.get` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.locations.` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.traffic.get` `firebaseauth.configs.get` `firebaseauth.users.get` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.list` `firebasedataconnect.locations.` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.services.get` `firebasedataconnect.services.introspectGraphql` `firebasedataconnect.services.list` `firebaseextensions.configs.list` `firebasehosting.sites.get` `firebasehosting.sites.list` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `firebaserules.releases.get` `firebaserules.releases.list` `firebaserules.rulesets.get` `firebaserules.rulesets.list` `firebasestorage.buckets.get` `firebasestorage.buckets.list` `firebasestorage.defaultBucket.get` `firebasevertexai.configs.get` `firebasevertexai.promptTemplates.get` `firebasevertexai.promptTemplates.list` `logging.logEntries.list` `monitoring.timeSeries.list` `oauthconfig.verification.get` `recommender.cloudFunctionsPerformanceInsights.get` `recommender.cloudFunctionsPerformanceInsights.list` `recommender.cloudFunctionsPerformanceRecommendations.get` `recommender.cloudFunctionsPerformanceRecommendations.list` `recommender.locations.` `recommender.locations.get` `recommender.locations.list` `recommender.runServiceCostInsights.get` `recommender.runServiceCostInsights.list` `recommender.runServiceCostRecommendations.get` `recommender.runServiceCostRecommendations.list` `recommender.runServiceIdentityInsights.get` `recommender.runServiceIdentityInsights.list` `recommender.runServiceIdentityRecommendations.get` `recommender.runServiceIdentityRecommendations.list` `recommender.runServicePerformanceInsights.get` `recommender.runServicePerformanceInsights.list` `recommender.runServicePerformanceRecommendations.get` `recommender.runServicePerformanceRecommendations.list` `recommender.runServiceSecurityInsights.get` `recommender.runServiceSecurityInsights.list` `recommender.runServiceSecurityRecommendations.get` `recommender.runServiceSecurityRecommendations.list` `remotebuildexecution.blobs.get` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `run.configurations.` `run.configurations.get` `run.configurations.list` `run.executions.get` `run.executions.list` `run.jobs.get` `run.jobs.getIamPolicy` `run.jobs.list` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.locations.list` `run.operations.get` `run.operations.list` `run.revisions.get` `run.revisions.list` `run.routes.get` `run.routes.list` `run.services.get` `run.services.getIamPolicy` `run.services.list` `run.services.listEffectiveTags` `run.services.listTagBindings` `run.tasks.` `run.tasks.get` `run.tasks.list` `run.workerpools.get` `run.workerpools.getIamPolicy` `run.workerpools.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.list` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list`
Firebase Grow Admin (`roles/firebase.growthAdmin`) Full access to Firebase Grow products and Analytics.	`apikeys.keys.get` `apikeys.keys.list` `clientauthconfig.clients.get` `clientauthconfig.clients.list` `cloudconfig.` `cloudconfig.configs.get` `cloudconfig.configs.update` `cloudmessaging.messages.create` `cloudnotifications.activities.list` `fcmdata.deliverydata.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseabt.` `firebaseabt.experimentresults.get` `firebaseabt.experiments.create` `firebaseabt.experiments.delete` `firebaseabt.experiments.get` `firebaseabt.experiments.list` `firebaseabt.experiments.update` `firebaseabt.projectmetadata.get` `firebaseanalytics.` `firebaseanalytics.resources.googleAnalyticsEdit` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebasedynamiclinks.` `firebasedynamiclinks.destinations.list` `firebasedynamiclinks.destinations.update` `firebasedynamiclinks.domains.create` `firebasedynamiclinks.domains.delete` `firebasedynamiclinks.domains.get` `firebasedynamiclinks.domains.list` `firebasedynamiclinks.domains.update` `firebasedynamiclinks.links.create` `firebasedynamiclinks.links.get` `firebasedynamiclinks.links.list` `firebasedynamiclinks.links.update` `firebasedynamiclinks.stats.get` `firebaseextensions.configs.list` `firebaseinappmessaging.` `firebaseinappmessaging.campaigns.create` `firebaseinappmessaging.campaigns.delete` `firebaseinappmessaging.campaigns.get` `firebaseinappmessaging.campaigns.list` `firebaseinappmessaging.campaigns.update` `firebasemessagingcampaigns.` `firebasemessagingcampaigns.campaigns.create` `firebasemessagingcampaigns.campaigns.delete` `firebasemessagingcampaigns.campaigns.get` `firebasemessagingcampaigns.campaigns.list` `firebasemessagingcampaigns.campaigns.start` `firebasemessagingcampaigns.campaigns.stop` `firebasemessagingcampaigns.campaigns.update` `firebasenotifications.` `firebasenotifications.messages.create` `firebasenotifications.messages.delete` `firebasenotifications.messages.get` `firebasenotifications.messages.list` `firebasenotifications.messages.update` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test`
Firebase Grow Viewer (`roles/firebase.growthViewer`) Read access to Firebase Grow products and Analytics.	`apikeys.keys.get` `apikeys.keys.list` `cloudconfig.configs.get` `cloudnotifications.activities.list` `fcmdata.deliverydata.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseabt.experimentresults.get` `firebaseabt.experiments.get` `firebaseabt.experiments.list` `firebaseabt.projectmetadata.get` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebasedynamiclinks.destinations.list` `firebasedynamiclinks.domains.get` `firebasedynamiclinks.domains.list` `firebasedynamiclinks.links.get` `firebasedynamiclinks.links.list` `firebasedynamiclinks.stats.get` `firebaseextensions.configs.list` `firebaseinappmessaging.campaigns.get` `firebaseinappmessaging.campaigns.list` `firebasemessagingcampaigns.campaigns.get` `firebasemessagingcampaigns.campaigns.list` `firebasenotifications.messages.get` `firebasenotifications.messages.list` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test`
Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`) Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services. Warning: Do not grant service agent roles to any principals except service agents.	`apikeys.keys.create` `apikeys.keys.get` `apikeys.keys.getKeyString` `apikeys.keys.list` `apikeys.keys.update` `appengine.applications.create` `appengine.applications.get` `appengine.applications.update` `appengine.operations.get` `appengine.services.list` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.datasets.setIamPolicy` `bigquery.datasets.update` `bigquery.transfers.` `bigquery.transfers.get` `bigquery.transfers.update` `clientauthconfig.brands.create` `clientauthconfig.brands.get` `clientauthconfig.brands.list` `clientauthconfig.brands.update` `clientauthconfig.clients.create` `clientauthconfig.clients.delete` `clientauthconfig.clients.get` `clientauthconfig.clients.getWithSecret` `clientauthconfig.clients.list` `clientauthconfig.clients.update` `datastore.databases.create` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.list` `datastore.databases.update` `datastore.locations.` `datastore.locations.get` `datastore.locations.list` `datastore.operations.get` `datastore.operations.list` `firebase.clients.create` `firebase.clients.delete` `firebase.clients.get` `firebase.clients.undelete` `firebase.clients.update` `firebase.projects.` `firebase.projects.delete` `firebase.projects.get` `firebase.projects.update` `firebaseabt.experiments.delete` `firebaseapphosting.domains.create` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.domains.update` `firebaseauth.configs.create` `firebaseauth.configs.get` `firebaseauth.configs.update` `firebasedataconnect.locations.` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.services.create` `firebasehosting.sites.create` `firebasehosting.sites.get` `firebasehosting.sites.list` `firebasehosting.sites.update` `firebaserules.releases.create` `firebaserules.releases.delete` `firebaserules.releases.get` `firebaserules.releases.list` `firebaserules.releases.update` `firebaserules.rulesets.create` `firebaserules.rulesets.get` `firebaserules.rulesets.list` `firebasestorage.defaultBucket.get` `firebasevertexai.configs.` `firebasevertexai.configs.get` `firebasevertexai.configs.update` `iam.roles.get` `iam.serviceAccounts.create` `iam.serviceAccounts.get` `iam.serviceAccounts.list` `resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.setIamPolicy` `resourcemanager.projects.update` `servicemanagement.services.bind` `serviceusage.consumerpolicy.` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.consumerpolicy.update` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.services.enable` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.services.use` `serviceusage.values.test` `storage.bucketOperations.get` `storage.bucketOperations.list` `storage.buckets.create` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.list` `storage.buckets.setIamPolicy` `storage.buckets.update`
Firebase Quality Admin (`roles/firebase.qualityAdmin`) Full access to Firebase Quality products and Analytics.	`apikeys.keys.get` `apikeys.keys.list` `cloudnotifications.activities.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseanalytics.` `firebaseanalytics.resources.googleAnalyticsEdit` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseappdistro.` `firebaseappdistro.groups.list` `firebaseappdistro.groups.update` `firebaseappdistro.releases.list` `firebaseappdistro.releases.update` `firebaseappdistro.testers.list` `firebaseappdistro.testers.update` `firebasecrash.` `firebasecrash.issues.update` `firebasecrash.reports.get` `firebasecrashlytics.` `firebasecrashlytics.config.get` `firebasecrashlytics.config.update` `firebasecrashlytics.data.get` `firebasecrashlytics.issues.get` `firebasecrashlytics.issues.list` `firebasecrashlytics.issues.update` `firebasecrashlytics.sessions.get` `firebaseextensions.configs.list` `firebaseperformance.` `firebaseperformance.config.update` `firebaseperformance.data.get` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test`
Firebase Quality Viewer (`roles/firebase.qualityViewer`) Read access to Firebase Quality products and Analytics.	`apikeys.keys.get` `apikeys.keys.list` `cloudnotifications.activities.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseappdistro.groups.list` `firebaseappdistro.releases.list` `firebaseappdistro.testers.list` `firebasecrash.reports.get` `firebasecrashlytics.config.get` `firebasecrashlytics.data.get` `firebasecrashlytics.issues.get` `firebasecrashlytics.issues.list` `firebasecrashlytics.sessions.get` `firebaseextensions.configs.list` `firebaseperformance.data.get` `monitoring.timeSeries.list` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test`
Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Read and write access to Firebase products available in the Admin SDK	`appengine.applications.get` `cloudconfig.` `cloudconfig.configs.get` `cloudconfig.configs.update` `cloudmessaging.messages.create` `databasesconsole.locations.` `databasesconsole.locations.get` `databasesconsole.locations.list` `databasesconsole.studioQueries.create` `databasesconsole.studioQueries.delete` `databasesconsole.studioQueries.search` `databasesconsole.studioQueries.update` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.list` `datastore.entities.` `datastore.entities.allocateIds` `datastore.entities.create` `datastore.entities.delete` `datastore.entities.get` `datastore.entities.list` `datastore.entities.update` `datastore.indexes.get` `datastore.indexes.list` `datastore.insights.get` `datastore.namespaces.` `datastore.namespaces.get` `datastore.namespaces.list` `datastore.statistics.` `datastore.statistics.get` `datastore.statistics.list` `firebase.clients.` `firebase.clients.create` `firebase.clients.delete` `firebase.clients.get` `firebase.clients.list` `firebase.clients.undelete` `firebase.clients.update` `firebase.projects.get` `firebase.projects.update` `firebaseappcheck.` `firebaseappcheck.appAttestConfig.get` `firebaseappcheck.appAttestConfig.update` `firebaseappcheck.appCheckTokens.verify` `firebaseappcheck.automations.create` `firebaseappcheck.automations.delete` `firebaseappcheck.automations.get` `firebaseappcheck.automations.list` `firebaseappcheck.automations.resume` `firebaseappcheck.automations.suspend` `firebaseappcheck.automations.update` `firebaseappcheck.debugTokens.get` `firebaseappcheck.debugTokens.update` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.deviceCheckConfig.update` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.playIntegrityConfig.update` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.update` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.recaptchaV3Config.update` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.resourcePolicies.update` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.safetyNetConfig.update` `firebaseappcheck.services.get` `firebaseappcheck.services.update` `firebaseauth.configs.create` `firebaseauth.configs.get` `firebaseauth.configs.getSecret` `firebaseauth.configs.update` `firebaseauth.users.` `firebaseauth.users.create` `firebaseauth.users.createSession` `firebaseauth.users.delete` `firebaseauth.users.get` `firebaseauth.users.sendEmail` `firebaseauth.users.update` `firebasedatabase.` `firebasedatabase.instances.create` `firebasedatabase.instances.delete` `firebasedatabase.instances.disable` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `firebasedatabase.instances.reenable` `firebasedatabase.instances.undelete` `firebasedatabase.instances.update` `firebasedataconnect.` `firebasedataconnect.connectorRevisions.delete` `firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.create` `firebasedataconnect.connectors.delete` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.impersonateMutation` `firebasedataconnect.connectors.impersonateQuery` `firebasedataconnect.connectors.list` `firebasedataconnect.connectors.update` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.cancel` `firebasedataconnect.operations.delete` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.delete` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.create` `firebasedataconnect.schemas.delete` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.schemas.update` `firebasedataconnect.services.create` `firebasedataconnect.services.delete` `firebasedataconnect.services.executeGraphql` `firebasedataconnect.services.executeGraphqlRead` `firebasedataconnect.services.get` `firebasedataconnect.services.introspectGraphql` `firebasedataconnect.services.list` `firebasedataconnect.services.update` `firebasehosting.` `firebasehosting.sites.create` `firebasehosting.sites.delete` `firebasehosting.sites.get` `firebasehosting.sites.list` `firebasehosting.sites.update` `firebaseml.` `firebaseml.models.create` `firebaseml.models.delete` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.models.update` `firebaseml.modelversions.create` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `firebaseml.modelversions.update` `firebasenotifications.` `firebasenotifications.messages.create` `firebasenotifications.messages.delete` `firebasenotifications.messages.get` `firebasenotifications.messages.list` `firebasenotifications.messages.update` `firebaserules.releases.get` `firebaserules.releases.list` `firebaserules.releases.update` `firebaserules.rulesets.create` `firebaserules.rulesets.delete` `firebaserules.rulesets.get` `firebaserules.rulesets.list` `identitytoolkit.` `identitytoolkit.tenants.create` `identitytoolkit.tenants.delete` `identitytoolkit.tenants.get` `identitytoolkit.tenants.getIamPolicy` `identitytoolkit.tenants.list` `identitytoolkit.tenants.setIamPolicy` `identitytoolkit.tenants.update` `monitoring.timeSeries.create` `orgpolicy.policy.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `resourcemanager.projects.update` `storage.buckets.create` `storage.buckets.delete` `storage.buckets.get` `storage.buckets.list` `storage.buckets.update` `storage.folders.` `storage.folders.create` `storage.folders.delete` `storage.folders.get` `storage.folders.list` `storage.folders.rename` `storage.managedFolders.create` `storage.managedFolders.delete` `storage.managedFolders.get` `storage.managedFolders.list` `storage.multipartUploads.` `storage.multipartUploads.abort` `storage.multipartUploads.create` `storage.multipartUploads.list` `storage.multipartUploads.listParts` `storage.objects.*` `storage.objects.create` `storage.objects.createContext` `storage.objects.delete` `storage.objects.deleteContext` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `storage.objects.move` `storage.objects.overrideUnlockedRetention` `storage.objects.restore` `storage.objects.setIamPolicy` `storage.objects.setRetention` `storage.objects.update` `storage.objects.updateContext`
Firebase SDK Provisioning Service Agent (`roles/firebase.sdkProvisioningServiceAgent`) Access to provision apps with the Admin SDK.	`apikeys.keys.list` `clientauthconfig.clients.list` `cloudmessaging.messages.create` `firebase.clients.create` `servicemanagement.services.bind` `serviceusage.consumerpolicy.` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.consumerpolicy.update` `serviceusage.effectivepolicy.get` `serviceusage.groups.` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.services.enable` `serviceusage.services.get` `serviceusage.values.test`
Firebase Viewer (`roles/firebase.viewer`) Read-only access to Firebase products.	`apikeys.keys.get` `apikeys.keys.list` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotations.list` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.datasets.get` `automl.datasets.list` `automl.examples.get` `automl.examples.list` `automl.files.list` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.get` `automl.models.list` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.get` `automl.tableSpecs.list` `clientauthconfig.brands.get` `clientauthconfig.brands.list` `cloudasset.assets.searchAllResources` `cloudbuild.builds.get` `cloudbuild.builds.list` `cloudbuild.locations.` `cloudbuild.locations.get` `cloudbuild.locations.list` `cloudbuild.operations.` `cloudbuild.operations.get` `cloudbuild.operations.list` `cloudconfig.configs.get` `cloudfunctions.functions.get` `cloudfunctions.functions.getIamPolicy` `cloudfunctions.functions.list` `cloudfunctions.locations.list` `cloudfunctions.operations.` `cloudfunctions.operations.get` `cloudfunctions.operations.list` `cloudnotifications.activities.list` `cloudtestservice.environmentcatalog.get` `cloudtestservice.matrices.get` `cloudtoolresults.executions.get` `cloudtoolresults.executions.list` `cloudtoolresults.histories.get` `cloudtoolresults.histories.list` `cloudtoolresults.settings.get` `cloudtoolresults.steps.get` `cloudtoolresults.steps.list` `datastore.backups.get` `datastore.backups.list` `datastore.databases.get` `datastore.databases.getMetadata` `datastore.databases.list` `datastore.entities.get` `datastore.entities.list` `datastore.indexes.get` `datastore.indexes.list` `datastore.namespaces.` `datastore.namespaces.get` `datastore.namespaces.list` `datastore.statistics.` `datastore.statistics.get` `datastore.statistics.list` `errorreporting.groups.list` `eventarc.channelConnections.get` `eventarc.channelConnections.getIamPolicy` `eventarc.channelConnections.list` `eventarc.channels.get` `eventarc.channels.getIamPolicy` `eventarc.channels.list` `eventarc.enrollments.get` `eventarc.enrollments.getIamPolicy` `eventarc.enrollments.list` `eventarc.googleApiSources.get` `eventarc.googleApiSources.getIamPolicy` `eventarc.googleApiSources.list` `eventarc.googleChannelConfigs.get` `eventarc.kafkaSources.get` `eventarc.kafkaSources.getIamPolicy` `eventarc.kafkaSources.list` `eventarc.locations.` `eventarc.locations.get` `eventarc.locations.list` `eventarc.messageBuses.get` `eventarc.messageBuses.getIamPolicy` `eventarc.messageBuses.list` `eventarc.messageBuses.use` `eventarc.multiProjectSources.collectGoogleApiEvents` `eventarc.operations.get` `eventarc.operations.list` `eventarc.pipelines.get` `eventarc.pipelines.getIamPolicy` `eventarc.pipelines.list` `eventarc.providers.` `eventarc.providers.get` `eventarc.providers.list` `eventarc.triggers.get` `eventarc.triggers.getIamPolicy` `eventarc.triggers.list` `fcmdata.deliverydata.list` `firebase.billingPlans.get` `firebase.clients.get` `firebase.clients.list` `firebase.links.list` `firebase.playLinks.get` `firebase.playLinks.list` `firebase.projects.get` `firebaseabt.experimentresults.get` `firebaseabt.experiments.get` `firebaseabt.experiments.list` `firebaseabt.projectmetadata.get` `firebaseanalytics.resources.googleAnalyticsReadAndAnalyze` `firebaseappcheck.appAttestConfig.get` `firebaseappcheck.automations.get` `firebaseappcheck.automations.list` `firebaseappcheck.debugTokens.get` `firebaseappcheck.deviceCheckConfig.get` `firebaseappcheck.playIntegrityConfig.get` `firebaseappcheck.recaptchaEnterpriseConfig.get` `firebaseappcheck.recaptchaV3Config.get` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.safetyNetConfig.get` `firebaseappcheck.services.get` `firebaseappdistro.groups.list` `firebaseappdistro.releases.list` `firebaseappdistro.testers.list` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.locations.` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.traffic.get` `firebaseauth.configs.get` `firebaseauth.users.get` `firebasecrash.reports.get` `firebasecrashlytics.config.get` `firebasecrashlytics.data.get` `firebasecrashlytics.issues.get` `firebasecrashlytics.issues.list` `firebasecrashlytics.sessions.get` `firebasedatabase.instances.get` `firebasedatabase.instances.list` `firebasedataconnect.connectorRevisions.get` `firebasedataconnect.connectorRevisions.list` `firebasedataconnect.connectors.get` `firebasedataconnect.connectors.list` `firebasedataconnect.locations.` `firebasedataconnect.locations.get` `firebasedataconnect.locations.list` `firebasedataconnect.operations.get` `firebasedataconnect.operations.list` `firebasedataconnect.schemaRevisions.get` `firebasedataconnect.schemaRevisions.list` `firebasedataconnect.schemas.get` `firebasedataconnect.schemas.list` `firebasedataconnect.services.get` `firebasedataconnect.services.introspectGraphql` `firebasedataconnect.services.list` `firebasedynamiclinks.destinations.list` `firebasedynamiclinks.domains.get` `firebasedynamiclinks.domains.list` `firebasedynamiclinks.links.get` `firebasedynamiclinks.links.list` `firebasedynamiclinks.stats.get` `firebaseextensions.configs.list` `firebaseextensionspublisher.extensions.get` `firebaseextensionspublisher.extensions.list` `firebasehosting.sites.get` `firebasehosting.sites.list` `firebaseinappmessaging.campaigns.get` `firebaseinappmessaging.campaigns.list` `firebasemessagingcampaigns.campaigns.get` `firebasemessagingcampaigns.campaigns.list` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `firebasenotifications.messages.get` `firebasenotifications.messages.list` `firebaseperformance.data.get` `firebaserules.releases.get` `firebaserules.releases.list` `firebaserules.rulesets.get` `firebaserules.rulesets.list` `firebasestorage.buckets.get` `firebasestorage.buckets.list` `firebasestorage.defaultBucket.get` `firebasevertexai.configs.get` `firebasevertexai.promptTemplates.get` `firebasevertexai.promptTemplates.list` `logging.logEntries.list` `monitoring.timeSeries.list` `oauthconfig.verification.get` `recommender.cloudFunctionsPerformanceInsights.get` `recommender.cloudFunctionsPerformanceInsights.list` `recommender.cloudFunctionsPerformanceRecommendations.get` `recommender.cloudFunctionsPerformanceRecommendations.list` `recommender.locations.` `recommender.locations.get` `recommender.locations.list` `recommender.runServiceCostInsights.get` `recommender.runServiceCostInsights.list` `recommender.runServiceCostRecommendations.get` `recommender.runServiceCostRecommendations.list` `recommender.runServiceIdentityInsights.get` `recommender.runServiceIdentityInsights.list` `recommender.runServiceIdentityRecommendations.get` `recommender.runServiceIdentityRecommendations.list` `recommender.runServicePerformanceInsights.get` `recommender.runServicePerformanceInsights.list` `recommender.runServicePerformanceRecommendations.get` `recommender.runServicePerformanceRecommendations.list` `recommender.runServiceSecurityInsights.get` `recommender.runServiceSecurityInsights.list` `recommender.runServiceSecurityRecommendations.get` `recommender.runServiceSecurityRecommendations.list` `remotebuildexecution.blobs.get` `resourcemanager.projects.get` `resourcemanager.projects.getIamPolicy` `resourcemanager.projects.list` `run.configurations.` `run.configurations.get` `run.configurations.list` `run.executions.get` `run.executions.list` `run.jobs.get` `run.jobs.getIamPolicy` `run.jobs.list` `run.jobs.listEffectiveTags` `run.jobs.listTagBindings` `run.locations.list` `run.operations.get` `run.operations.list` `run.revisions.get` `run.revisions.list` `run.routes.get` `run.routes.list` `run.services.get` `run.services.getIamPolicy` `run.services.list` `run.services.listEffectiveTags` `run.services.listTagBindings` `run.tasks.` `run.tasks.get` `run.tasks.list` `run.workerpools.get` `run.workerpools.getIamPolicy` `run.workerpools.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.contentsecuritypolicy.get` `serviceusage.effectivemcppolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.mcppolicy.get` `serviceusage.operations.get` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test` `storage.buckets.get` `storage.buckets.getIamPolicy` `storage.buckets.list` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list`

Firebase Admin

(roles/firebase.admin)

Full access to Firebase products.

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.lookup

appengine.applications.get

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.dockerimages.get
artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

artifactregistry.locations.get
artifactregistry.locations.list

artifactregistry.mavenartifacts.*

artifactregistry.mavenartifacts.get
artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

artifactregistry.npmpackages.get
artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.pythonpackages.get
artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

automl.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update
automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject
automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update
automl.datasets.create
automl.datasets.delete
automl.datasets.export
automl.datasets.get
automl.datasets.getIamPolicy
automl.datasets.import
automl.datasets.list
automl.datasets.setIamPolicy
automl.datasets.update
automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update
automl.files.delete
automl.files.list
automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list
automl.locations.get
automl.locations.getIamPolicy
automl.locations.list
automl.locations.setIamPolicy
automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list
automl.models.create
automl.models.delete
automl.models.deploy
automl.models.export
automl.models.get
automl.models.getIamPolicy
automl.models.list
automl.models.predict
automl.models.setIamPolicy
automl.models.undeploy
automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list
automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.create

clientauthconfig.clients.delete

clientauthconfig.clients.get

clientauthconfig.clients.list

clientauthconfig.clients.update

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

cloudbuild.locations.get
cloudbuild.locations.list

cloudbuild.operations.*

cloudbuild.operations.get
cloudbuild.operations.list

cloudconfig.*

cloudconfig.configs.get
cloudconfig.configs.update

cloudfunctions.*

cloudfunctions.functions.call
cloudfunctions.functions.create
cloudfunctions.functions.delete
cloudfunctions.functions.generationUpgrade
cloudfunctions.functions.get
cloudfunctions.functions.getIamPolicy
cloudfunctions.functions.invoke
cloudfunctions.functions.list
cloudfunctions.functions.setIamPolicy
cloudfunctions.functions.sourceCodeGet
cloudfunctions.functions.sourceCodeSet
cloudfunctions.functions.update
cloudfunctions.locations.list
cloudfunctions.operations.get
cloudfunctions.operations.list

cloudkms.keyHandles.*

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudmessaging.messages.create

cloudnotifications.activities.list

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.*

cloudtestservice.matrices.create
cloudtestservice.matrices.get
cloudtestservice.matrices.update

cloudtoolresults.*

cloudtoolresults.executions.create
cloudtoolresults.executions.get
cloudtoolresults.executions.list
cloudtoolresults.executions.update
cloudtoolresults.histories.create
cloudtoolresults.histories.get
cloudtoolresults.histories.list
cloudtoolresults.settings.create
cloudtoolresults.settings.get
cloudtoolresults.settings.update
cloudtoolresults.steps.create
cloudtoolresults.steps.get
cloudtoolresults.steps.list
cloudtoolresults.steps.update

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.studioQueries.*

databasesconsole.studioQueries.create
databasesconsole.studioQueries.delete
databasesconsole.studioQueries.get
databasesconsole.studioQueries.list
databasesconsole.studioQueries.search
databasesconsole.studioQueries.update

datastore.*

datastore.backupSchedules.create
datastore.backupSchedules.delete
datastore.backupSchedules.get
datastore.backupSchedules.list
datastore.backupSchedules.update
datastore.backups.delete
datastore.backups.get
datastore.backups.list
datastore.backups.restoreDatabase
datastore.databases.bulkDelete
datastore.databases.clone
datastore.databases.create
datastore.databases.createTagBinding
datastore.databases.delete
datastore.databases.deleteTagBinding
datastore.databases.export
datastore.databases.get
datastore.databases.getMetadata
datastore.databases.import
datastore.databases.list
datastore.databases.listEffectiveTags
datastore.databases.listTagBindings
datastore.databases.update
datastore.entities.allocateIds
datastore.entities.create
datastore.entities.delete
datastore.entities.get
datastore.entities.list
datastore.entities.update
datastore.indexes.create
datastore.indexes.delete
datastore.indexes.get
datastore.indexes.list
datastore.indexes.update
datastore.insights.get
datastore.keyVisualizerScans.get
datastore.keyVisualizerScans.list
datastore.locations.get
datastore.locations.list
datastore.namespaces.get
datastore.namespaces.list
datastore.operations.cancel
datastore.operations.delete
datastore.operations.get
datastore.operations.list
datastore.statistics.get
datastore.statistics.list
datastore.userCreds.create
datastore.userCreds.delete
datastore.userCreds.get
datastore.userCreds.list
datastore.userCreds.update

errorreporting.groups.list

eventarc.*

eventarc.channelConnections.create
eventarc.channelConnections.delete
eventarc.channelConnections.get
eventarc.channelConnections.getIamPolicy
eventarc.channelConnections.list
eventarc.channelConnections.publish
eventarc.channelConnections.setIamPolicy
eventarc.channels.attach
eventarc.channels.create
eventarc.channels.delete
eventarc.channels.get
eventarc.channels.getIamPolicy
eventarc.channels.list
eventarc.channels.publish
eventarc.channels.setIamPolicy
eventarc.channels.undelete
eventarc.channels.update
eventarc.enrollments.create
eventarc.enrollments.delete
eventarc.enrollments.get
eventarc.enrollments.getIamPolicy
eventarc.enrollments.list
eventarc.enrollments.setIamPolicy
eventarc.enrollments.update
eventarc.events.receiveAuditLogWritten
eventarc.events.receiveEvent
eventarc.googleApiSources.create
eventarc.googleApiSources.delete
eventarc.googleApiSources.get
eventarc.googleApiSources.getIamPolicy
eventarc.googleApiSources.list
eventarc.googleApiSources.setIamPolicy
eventarc.googleApiSources.update
eventarc.googleChannelConfigs.get
eventarc.googleChannelConfigs.update
eventarc.kafkaSources.create
eventarc.kafkaSources.delete
eventarc.kafkaSources.get
eventarc.kafkaSources.getIamPolicy
eventarc.kafkaSources.list
eventarc.kafkaSources.setIamPolicy
eventarc.locations.get
eventarc.locations.list
eventarc.messageBuses.create
eventarc.messageBuses.delete
eventarc.messageBuses.get
eventarc.messageBuses.getIamPolicy
eventarc.messageBuses.list
eventarc.messageBuses.publish
eventarc.messageBuses.setIamPolicy
eventarc.messageBuses.update
eventarc.messageBuses.use
eventarc.multiProjectSources.collectGoogleApiEvents
eventarc.operations.cancel
eventarc.operations.delete
eventarc.operations.get
eventarc.operations.list
eventarc.pipelines.create
eventarc.pipelines.delete
eventarc.pipelines.get
eventarc.pipelines.getIamPolicy
eventarc.pipelines.list
eventarc.pipelines.setIamPolicy
eventarc.pipelines.update
eventarc.providers.get
eventarc.providers.list
eventarc.triggers.create
eventarc.triggers.delete
eventarc.triggers.get
eventarc.triggers.getIamPolicy
eventarc.triggers.list
eventarc.triggers.setIamPolicy
eventarc.triggers.undelete
eventarc.triggers.update

fcmdata.deliverydata.list

firebase.*

firebase.billingPlans.get
firebase.billingPlans.update
firebase.clients.create
firebase.clients.delete
firebase.clients.get
firebase.clients.list
firebase.clients.undelete
firebase.clients.update
firebase.links.create
firebase.links.delete
firebase.links.list
firebase.links.update
firebase.playLinks.get
firebase.playLinks.list
firebase.playLinks.update
firebase.projects.delete
firebase.projects.get
firebase.projects.update

firebaseabt.*

firebaseabt.experimentresults.get
firebaseabt.experiments.create
firebaseabt.experiments.delete
firebaseabt.experiments.get
firebaseabt.experiments.list
firebaseabt.experiments.update
firebaseabt.projectmetadata.get

firebaseanalytics.*

firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.*

firebaseappcheck.appAttestConfig.get
firebaseappcheck.appAttestConfig.update
firebaseappcheck.appCheckTokens.verify
firebaseappcheck.automations.create
firebaseappcheck.automations.delete
firebaseappcheck.automations.get
firebaseappcheck.automations.list
firebaseappcheck.automations.resume
firebaseappcheck.automations.suspend
firebaseappcheck.automations.update
firebaseappcheck.debugTokens.get
firebaseappcheck.debugTokens.update
firebaseappcheck.deviceCheckConfig.get
firebaseappcheck.deviceCheckConfig.update
firebaseappcheck.playIntegrityConfig.get
firebaseappcheck.playIntegrityConfig.update
firebaseappcheck.recaptchaEnterpriseConfig.get
firebaseappcheck.recaptchaEnterpriseConfig.update
firebaseappcheck.recaptchaV3Config.get
firebaseappcheck.recaptchaV3Config.update
firebaseappcheck.resourcePolicies.get
firebaseappcheck.resourcePolicies.update
firebaseappcheck.safetyNetConfig.get
firebaseappcheck.safetyNetConfig.update
firebaseappcheck.services.get
firebaseappcheck.services.update

firebaseappdistro.*

firebaseappdistro.groups.list
firebaseappdistro.groups.update
firebaseappdistro.releases.list
firebaseappdistro.releases.update
firebaseappdistro.testers.list
firebaseappdistro.testers.update

firebaseapphosting.*

firebaseapphosting.backends.create
firebaseapphosting.backends.delete
firebaseapphosting.backends.get
firebaseapphosting.backends.list
firebaseapphosting.backends.update
firebaseapphosting.builds.create
firebaseapphosting.builds.delete
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.builds.update
firebaseapphosting.domains.create
firebaseapphosting.domains.delete
firebaseapphosting.domains.get
firebaseapphosting.domains.list
firebaseapphosting.domains.update
firebaseapphosting.locations.get
firebaseapphosting.locations.list
firebaseapphosting.operations.cancel
firebaseapphosting.operations.delete
firebaseapphosting.operations.get
firebaseapphosting.operations.list
firebaseapphosting.rollouts.create
firebaseapphosting.rollouts.delete
firebaseapphosting.rollouts.get
firebaseapphosting.rollouts.list
firebaseapphosting.rollouts.update
firebaseapphosting.traffic.get
firebaseapphosting.traffic.update

firebaseauth.*

firebaseauth.configs.create
firebaseauth.configs.get
firebaseauth.configs.getHashConfig
firebaseauth.configs.getSecret
firebaseauth.configs.update
firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update

firebasecrash.*

firebasecrash.issues.update
firebasecrash.reports.get

firebasecrashlytics.*

firebasecrashlytics.config.get
firebasecrashlytics.config.update
firebasecrashlytics.data.get
firebasecrashlytics.issues.get
firebasecrashlytics.issues.list
firebasecrashlytics.issues.update
firebasecrashlytics.sessions.get

firebasedatabase.*

firebasedatabase.instances.create
firebasedatabase.instances.delete
firebasedatabase.instances.disable
firebasedatabase.instances.get
firebasedatabase.instances.list
firebasedatabase.instances.reenable
firebasedatabase.instances.undelete
firebasedatabase.instances.update

firebasedataconnect.*

firebasedataconnect.connectorRevisions.delete
firebasedataconnect.connectorRevisions.get
firebasedataconnect.connectorRevisions.list
firebasedataconnect.connectors.create
firebasedataconnect.connectors.delete
firebasedataconnect.connectors.get
firebasedataconnect.connectors.impersonateMutation
firebasedataconnect.connectors.impersonateQuery
firebasedataconnect.connectors.list
firebasedataconnect.connectors.update
firebasedataconnect.locations.get
firebasedataconnect.locations.list
firebasedataconnect.operations.cancel
firebasedataconnect.operations.delete
firebasedataconnect.operations.get
firebasedataconnect.operations.list
firebasedataconnect.schemaRevisions.delete
firebasedataconnect.schemaRevisions.get
firebasedataconnect.schemaRevisions.list
firebasedataconnect.schemas.create
firebasedataconnect.schemas.delete
firebasedataconnect.schemas.get
firebasedataconnect.schemas.list
firebasedataconnect.schemas.update
firebasedataconnect.services.create
firebasedataconnect.services.delete
firebasedataconnect.services.executeGraphql
firebasedataconnect.services.executeGraphqlRead
firebasedataconnect.services.get
firebasedataconnect.services.introspectGraphql
firebasedataconnect.services.list
firebasedataconnect.services.update

firebasedynamiclinks.*

firebasedynamiclinks.destinations.list
firebasedynamiclinks.destinations.update
firebasedynamiclinks.domains.create
firebasedynamiclinks.domains.delete
firebasedynamiclinks.domains.get
firebasedynamiclinks.domains.list
firebasedynamiclinks.domains.update
firebasedynamiclinks.links.create
firebasedynamiclinks.links.get
firebasedynamiclinks.links.list
firebasedynamiclinks.links.update
firebasedynamiclinks.stats.get

firebaseextensions.*

firebaseextensions.configs.create
firebaseextensions.configs.delete
firebaseextensions.configs.list
firebaseextensions.configs.update

firebaseextensionspublisher.*

firebaseextensionspublisher.extensions.create
firebaseextensionspublisher.extensions.delete
firebaseextensionspublisher.extensions.get
firebaseextensionspublisher.extensions.list

firebasehosting.*

firebasehosting.sites.create
firebasehosting.sites.delete
firebasehosting.sites.get
firebasehosting.sites.list
firebasehosting.sites.update

firebaseinappmessaging.*

firebaseinappmessaging.campaigns.create
firebaseinappmessaging.campaigns.delete
firebaseinappmessaging.campaigns.get
firebaseinappmessaging.campaigns.list
firebaseinappmessaging.campaigns.update

firebasemessagingcampaigns.*

firebasemessagingcampaigns.campaigns.create
firebasemessagingcampaigns.campaigns.delete
firebasemessagingcampaigns.campaigns.get
firebasemessagingcampaigns.campaigns.list
firebasemessagingcampaigns.campaigns.start
firebasemessagingcampaigns.campaigns.stop
firebasemessagingcampaigns.campaigns.update

firebaseml.*

firebaseml.models.create
firebaseml.models.delete
firebaseml.models.get
firebaseml.models.list
firebaseml.models.update
firebaseml.modelversions.create
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaseml.modelversions.update

firebasenotifications.*

firebasenotifications.messages.create
firebasenotifications.messages.delete
firebasenotifications.messages.get
firebasenotifications.messages.list
firebasenotifications.messages.update

firebaseperformance.*

firebaseperformance.config.update
firebaseperformance.data.get

firebaserules.*

firebaserules.releases.create
firebaserules.releases.delete
firebaserules.releases.get
firebaserules.releases.getExecutable
firebaserules.releases.list
firebaserules.releases.update
firebaserules.rulesets.create
firebaserules.rulesets.delete
firebaserules.rulesets.get
firebaserules.rulesets.list
firebaserules.rulesets.test

firebasestorage.*

firebasestorage.buckets.addFirebase
firebasestorage.buckets.get
firebasestorage.buckets.list
firebasestorage.buckets.removeFirebase
firebasestorage.defaultBucket.create
firebasestorage.defaultBucket.delete
firebasestorage.defaultBucket.get

firebasevertexai.*

firebasevertexai.configs.get
firebasevertexai.configs.update
firebasevertexai.promptTemplates.create
firebasevertexai.promptTemplates.delete
firebasevertexai.promptTemplates.get
firebasevertexai.promptTemplates.list
firebasevertexai.promptTemplates.update

logging.logEntries.list

monitoring.timeSeries.*

monitoring.timeSeries.create
monitoring.timeSeries.list

oauthconfig.verification.get

orgpolicy.policy.get

recommender.cloudFunctionsPerformanceInsights.*

recommender.cloudFunctionsPerformanceInsights.get
recommender.cloudFunctionsPerformanceInsights.list
recommender.cloudFunctionsPerformanceInsights.update

recommender.cloudFunctionsPerformanceRecommendations.*

recommender.cloudFunctionsPerformanceRecommendations.get
recommender.cloudFunctionsPerformanceRecommendations.list
recommender.cloudFunctionsPerformanceRecommendations.update

recommender.iamPolicyInsights.*

recommender.iamPolicyInsights.get
recommender.iamPolicyInsights.list
recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

recommender.iamPolicyRecommendations.get
recommender.iamPolicyRecommendations.list
recommender.iamPolicyRecommendations.update

recommender.locations.*

recommender.locations.get
recommender.locations.list

recommender.runServiceCostInsights.*

recommender.runServiceCostInsights.get
recommender.runServiceCostInsights.list
recommender.runServiceCostInsights.update

recommender.runServiceCostRecommendations.*

recommender.runServiceCostRecommendations.get
recommender.runServiceCostRecommendations.list
recommender.runServiceCostRecommendations.update

recommender.runServiceIdentityInsights.*

recommender.runServiceIdentityInsights.get
recommender.runServiceIdentityInsights.list
recommender.runServiceIdentityInsights.update

recommender.runServiceIdentityRecommendations.*

recommender.runServiceIdentityRecommendations.get
recommender.runServiceIdentityRecommendations.list
recommender.runServiceIdentityRecommendations.update

recommender.runServicePerformanceInsights.*

recommender.runServicePerformanceInsights.get
recommender.runServicePerformanceInsights.list
recommender.runServicePerformanceInsights.update

recommender.runServicePerformanceRecommendations.*

recommender.runServicePerformanceRecommendations.get
recommender.runServicePerformanceRecommendations.list
recommender.runServicePerformanceRecommendations.update

recommender.runServiceSecurityInsights.*

recommender.runServiceSecurityInsights.get
recommender.runServiceSecurityInsights.list
recommender.runServiceSecurityInsights.update

recommender.runServiceSecurityRecommendations.*

recommender.runServiceSecurityRecommendations.get
recommender.runServiceSecurityRecommendations.list
recommender.runServiceSecurityRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

recommender.storageBucketSoftDeleteInsights.get
recommender.storageBucketSoftDeleteInsights.list
recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

recommender.storageBucketSoftDeleteRecommendations.get
recommender.storageBucketSoftDeleteRecommendations.list
recommender.storageBucketSoftDeleteRecommendations.update

remotebuildexecution.blobs.get

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.*

run.configurations.get
run.configurations.list
run.executions.cancel
run.executions.delete
run.executions.get
run.executions.list
run.jobs.create
run.jobs.createTagBinding
run.jobs.delete
run.jobs.deleteTagBinding
run.jobs.get
run.jobs.getIamPolicy
run.jobs.list
run.jobs.listEffectiveTags
run.jobs.listTagBindings
run.jobs.run
run.jobs.runWithOverrides
run.jobs.setIamPolicy
run.jobs.update
run.locations.list
run.operations.delete
run.operations.get
run.operations.list
run.revisions.delete
run.revisions.get
run.revisions.list
run.routes.get
run.routes.invoke
run.routes.list
run.services.create
run.services.createTagBinding
run.services.delete
run.services.deleteTagBinding
run.services.get
run.services.getIamPolicy
run.services.list
run.services.listEffectiveTags
run.services.listTagBindings
run.services.setIamPolicy
run.services.update
run.tasks.get
run.tasks.list
run.workerpools.create
run.workerpools.delete
run.workerpools.get
run.workerpools.getIamPolicy
run.workerpools.list
run.workerpools.setIamPolicy
run.workerpools.update

runtimeconfig.configs.create

runtimeconfig.configs.delete

runtimeconfig.configs.get

runtimeconfig.configs.list

runtimeconfig.configs.update

runtimeconfig.operations.*

runtimeconfig.operations.get
runtimeconfig.operations.list

runtimeconfig.variables.create

runtimeconfig.variables.delete

runtimeconfig.variables.get

runtimeconfig.variables.list

runtimeconfig.variables.update

runtimeconfig.variables.watch

runtimeconfig.waiters.create

runtimeconfig.waiters.delete

runtimeconfig.waiters.get

runtimeconfig.waiters.list

runtimeconfig.waiters.update

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.anywhereCaches.*

storage.anywhereCaches.create
storage.anywhereCaches.disable
storage.anywhereCaches.get
storage.anywhereCaches.list
storage.anywhereCaches.pause
storage.anywhereCaches.resume
storage.anywhereCaches.update

storage.bucketOperations.*

storage.bucketOperations.cancel
storage.bucketOperations.get
storage.bucketOperations.list

storage.buckets.*

storage.buckets.create
storage.buckets.createTagBinding
storage.buckets.delete
storage.buckets.deleteTagBinding
storage.buckets.enableObjectRetention
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.getIpFilter
storage.buckets.getObjectInsights
storage.buckets.list
storage.buckets.listEffectiveTags
storage.buckets.listTagBindings
storage.buckets.relocate
storage.buckets.restore
storage.buckets.setIamPolicy
storage.buckets.setIpFilter
storage.buckets.update

storage.folders.*

storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename

storage.intelligenceConfigs.*

storage.intelligenceConfigs.get
storage.intelligenceConfigs.update

storage.managedFolders.*

storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.getIamPolicy
storage.managedFolders.list
storage.managedFolders.setIamPolicy

storage.multipartUploads.*

storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts

storage.objects.*

storage.objects.create
storage.objects.createContext
storage.objects.delete
storage.objects.deleteContext
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
storage.objects.move
storage.objects.overrideUnlockedRetention
storage.objects.restore
storage.objects.setIamPolicy
storage.objects.setRetention
storage.objects.update
storage.objects.updateContext

storagebatchoperations.*

storagebatchoperations.jobs.cancel
storagebatchoperations.jobs.create
storagebatchoperations.jobs.delete
storagebatchoperations.jobs.get
storagebatchoperations.jobs.list
storagebatchoperations.locations.get
storagebatchoperations.locations.list
storagebatchoperations.operations.cancel
storagebatchoperations.operations.delete
storagebatchoperations.operations.get
storagebatchoperations.operations.list

Firebase Analytics Admin

(roles/firebase.analyticsAdmin)

Full access to Google Analytics for Firebase.

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseextensions.configs.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

Firebase Analytics Viewer

(roles/firebase.analyticsViewer)

Read access to Google Analytics for Firebase.

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseextensions.configs.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

Firebase App Distribution Admin SDK Service Agent

(roles/firebase.appDistributionSdkServiceAgent)

Read and write access to Firebase App Distribution with the Admin SDK

firebaseappdistro.*

firebaseappdistro.groups.list
firebaseappdistro.groups.update
firebaseappdistro.releases.list
firebaseappdistro.releases.update
firebaseappdistro.testers.list
firebaseappdistro.testers.update

Firebase Develop Admin

(roles/firebase.developAdmin)

Full access to Firebase Develop products and Analytics.

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.lookup

appengine.applications.get

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.dockerimages.get
artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

artifactregistry.locations.get
artifactregistry.locations.list

artifactregistry.mavenartifacts.*

artifactregistry.mavenartifacts.get
artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

artifactregistry.npmpackages.get
artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.pythonpackages.get
artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

automl.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update
automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject
automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update
automl.datasets.create
automl.datasets.delete
automl.datasets.export
automl.datasets.get
automl.datasets.getIamPolicy
automl.datasets.import
automl.datasets.list
automl.datasets.setIamPolicy
automl.datasets.update
automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update
automl.files.delete
automl.files.list
automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list
automl.locations.get
automl.locations.getIamPolicy
automl.locations.list
automl.locations.setIamPolicy
automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list
automl.models.create
automl.models.delete
automl.models.deploy
automl.models.export
automl.models.get
automl.models.getIamPolicy
automl.models.list
automl.models.predict
automl.models.setIamPolicy
automl.models.undeploy
automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list
automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.get

clientauthconfig.clients.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

cloudbuild.locations.get
cloudbuild.locations.list

cloudbuild.operations.*

cloudbuild.operations.get
cloudbuild.operations.list

cloudfunctions.*

cloudfunctions.functions.call
cloudfunctions.functions.create
cloudfunctions.functions.delete
cloudfunctions.functions.generationUpgrade
cloudfunctions.functions.get
cloudfunctions.functions.getIamPolicy
cloudfunctions.functions.invoke
cloudfunctions.functions.list
cloudfunctions.functions.setIamPolicy
cloudfunctions.functions.sourceCodeGet
cloudfunctions.functions.sourceCodeSet
cloudfunctions.functions.update
cloudfunctions.locations.list
cloudfunctions.operations.get
cloudfunctions.operations.list

cloudkms.keyHandles.*

cloudkms.keyHandles.create
cloudkms.keyHandles.get
cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudnotifications.activities.list

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.studioQueries.*

databasesconsole.studioQueries.create
databasesconsole.studioQueries.delete
databasesconsole.studioQueries.get
databasesconsole.studioQueries.list
databasesconsole.studioQueries.search
databasesconsole.studioQueries.update

datastore.*

datastore.backupSchedules.create
datastore.backupSchedules.delete
datastore.backupSchedules.get
datastore.backupSchedules.list
datastore.backupSchedules.update
datastore.backups.delete
datastore.backups.get
datastore.backups.list
datastore.backups.restoreDatabase
datastore.databases.bulkDelete
datastore.databases.clone
datastore.databases.create
datastore.databases.createTagBinding
datastore.databases.delete
datastore.databases.deleteTagBinding
datastore.databases.export
datastore.databases.get
datastore.databases.getMetadata
datastore.databases.import
datastore.databases.list
datastore.databases.listEffectiveTags
datastore.databases.listTagBindings
datastore.databases.update
datastore.entities.allocateIds
datastore.entities.create
datastore.entities.delete
datastore.entities.get
datastore.entities.list
datastore.entities.update
datastore.indexes.create
datastore.indexes.delete
datastore.indexes.get
datastore.indexes.list
datastore.indexes.update
datastore.insights.get
datastore.keyVisualizerScans.get
datastore.keyVisualizerScans.list
datastore.locations.get
datastore.locations.list
datastore.namespaces.get
datastore.namespaces.list
datastore.operations.cancel
datastore.operations.delete
datastore.operations.get
datastore.operations.list
datastore.statistics.get
datastore.statistics.list
datastore.userCreds.create
datastore.userCreds.delete
datastore.userCreds.get
datastore.userCreds.list
datastore.userCreds.update

errorreporting.groups.list

eventarc.*

eventarc.channelConnections.create
eventarc.channelConnections.delete
eventarc.channelConnections.get
eventarc.channelConnections.getIamPolicy
eventarc.channelConnections.list
eventarc.channelConnections.publish
eventarc.channelConnections.setIamPolicy
eventarc.channels.attach
eventarc.channels.create
eventarc.channels.delete
eventarc.channels.get
eventarc.channels.getIamPolicy
eventarc.channels.list
eventarc.channels.publish
eventarc.channels.setIamPolicy
eventarc.channels.undelete
eventarc.channels.update
eventarc.enrollments.create
eventarc.enrollments.delete
eventarc.enrollments.get
eventarc.enrollments.getIamPolicy
eventarc.enrollments.list
eventarc.enrollments.setIamPolicy
eventarc.enrollments.update
eventarc.events.receiveAuditLogWritten
eventarc.events.receiveEvent
eventarc.googleApiSources.create
eventarc.googleApiSources.delete
eventarc.googleApiSources.get
eventarc.googleApiSources.getIamPolicy
eventarc.googleApiSources.list
eventarc.googleApiSources.setIamPolicy
eventarc.googleApiSources.update
eventarc.googleChannelConfigs.get
eventarc.googleChannelConfigs.update
eventarc.kafkaSources.create
eventarc.kafkaSources.delete
eventarc.kafkaSources.get
eventarc.kafkaSources.getIamPolicy
eventarc.kafkaSources.list
eventarc.kafkaSources.setIamPolicy
eventarc.locations.get
eventarc.locations.list
eventarc.messageBuses.create
eventarc.messageBuses.delete
eventarc.messageBuses.get
eventarc.messageBuses.getIamPolicy
eventarc.messageBuses.list
eventarc.messageBuses.publish
eventarc.messageBuses.setIamPolicy
eventarc.messageBuses.update
eventarc.messageBuses.use
eventarc.multiProjectSources.collectGoogleApiEvents
eventarc.operations.cancel
eventarc.operations.delete
eventarc.operations.get
eventarc.operations.list
eventarc.pipelines.create
eventarc.pipelines.delete
eventarc.pipelines.get
eventarc.pipelines.getIamPolicy
eventarc.pipelines.list
eventarc.pipelines.setIamPolicy
eventarc.pipelines.update
eventarc.providers.get
eventarc.providers.list
eventarc.triggers.create
eventarc.triggers.delete
eventarc.triggers.get
eventarc.triggers.getIamPolicy
eventarc.triggers.list
eventarc.triggers.setIamPolicy
eventarc.triggers.undelete
eventarc.triggers.update

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.*

firebaseappcheck.appAttestConfig.get
firebaseappcheck.appAttestConfig.update
firebaseappcheck.appCheckTokens.verify
firebaseappcheck.automations.create
firebaseappcheck.automations.delete
firebaseappcheck.automations.get
firebaseappcheck.automations.list
firebaseappcheck.automations.resume
firebaseappcheck.automations.suspend
firebaseappcheck.automations.update
firebaseappcheck.debugTokens.get
firebaseappcheck.debugTokens.update
firebaseappcheck.deviceCheckConfig.get
firebaseappcheck.deviceCheckConfig.update
firebaseappcheck.playIntegrityConfig.get
firebaseappcheck.playIntegrityConfig.update
firebaseappcheck.recaptchaEnterpriseConfig.get
firebaseappcheck.recaptchaEnterpriseConfig.update
firebaseappcheck.recaptchaV3Config.get
firebaseappcheck.recaptchaV3Config.update
firebaseappcheck.resourcePolicies.get
firebaseappcheck.resourcePolicies.update
firebaseappcheck.safetyNetConfig.get
firebaseappcheck.safetyNetConfig.update
firebaseappcheck.services.get
firebaseappcheck.services.update

firebaseapphosting.*

firebaseapphosting.backends.create
firebaseapphosting.backends.delete
firebaseapphosting.backends.get
firebaseapphosting.backends.list
firebaseapphosting.backends.update
firebaseapphosting.builds.create
firebaseapphosting.builds.delete
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.builds.update
firebaseapphosting.domains.create
firebaseapphosting.domains.delete
firebaseapphosting.domains.get
firebaseapphosting.domains.list
firebaseapphosting.domains.update
firebaseapphosting.locations.get
firebaseapphosting.locations.list
firebaseapphosting.operations.cancel
firebaseapphosting.operations.delete
firebaseapphosting.operations.get
firebaseapphosting.operations.list
firebaseapphosting.rollouts.create
firebaseapphosting.rollouts.delete
firebaseapphosting.rollouts.get
firebaseapphosting.rollouts.list
firebaseapphosting.rollouts.update
firebaseapphosting.traffic.get
firebaseapphosting.traffic.update

firebaseauth.*

firebaseauth.configs.create
firebaseauth.configs.get
firebaseauth.configs.getHashConfig
firebaseauth.configs.getSecret
firebaseauth.configs.update
firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update

firebasedatabase.*

firebasedatabase.instances.create
firebasedatabase.instances.delete
firebasedatabase.instances.disable
firebasedatabase.instances.get
firebasedatabase.instances.list
firebasedatabase.instances.reenable
firebasedatabase.instances.undelete
firebasedatabase.instances.update

firebasedataconnect.*

firebasedataconnect.connectorRevisions.delete
firebasedataconnect.connectorRevisions.get
firebasedataconnect.connectorRevisions.list
firebasedataconnect.connectors.create
firebasedataconnect.connectors.delete
firebasedataconnect.connectors.get
firebasedataconnect.connectors.impersonateMutation
firebasedataconnect.connectors.impersonateQuery
firebasedataconnect.connectors.list
firebasedataconnect.connectors.update
firebasedataconnect.locations.get
firebasedataconnect.locations.list
firebasedataconnect.operations.cancel
firebasedataconnect.operations.delete
firebasedataconnect.operations.get
firebasedataconnect.operations.list
firebasedataconnect.schemaRevisions.delete
firebasedataconnect.schemaRevisions.get
firebasedataconnect.schemaRevisions.list
firebasedataconnect.schemas.create
firebasedataconnect.schemas.delete
firebasedataconnect.schemas.get
firebasedataconnect.schemas.list
firebasedataconnect.schemas.update
firebasedataconnect.services.create
firebasedataconnect.services.delete
firebasedataconnect.services.executeGraphql
firebasedataconnect.services.executeGraphqlRead
firebasedataconnect.services.get
firebasedataconnect.services.introspectGraphql
firebasedataconnect.services.list
firebasedataconnect.services.update

firebaseextensions.configs.list

firebasehosting.*

firebasehosting.sites.create
firebasehosting.sites.delete
firebasehosting.sites.get
firebasehosting.sites.list
firebasehosting.sites.update

firebaseml.*

firebaseml.models.create
firebaseml.models.delete
firebaseml.models.get
firebaseml.models.list
firebaseml.models.update
firebaseml.modelversions.create
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaseml.modelversions.update

firebaserules.*

firebaserules.releases.create
firebaserules.releases.delete
firebaserules.releases.get
firebaserules.releases.getExecutable
firebaserules.releases.list
firebaserules.releases.update
firebaserules.rulesets.create
firebaserules.rulesets.delete
firebaserules.rulesets.get
firebaserules.rulesets.list
firebaserules.rulesets.test

firebasestorage.*

firebasestorage.buckets.addFirebase
firebasestorage.buckets.get
firebasestorage.buckets.list
firebasestorage.buckets.removeFirebase
firebasestorage.defaultBucket.create
firebasestorage.defaultBucket.delete
firebasestorage.defaultBucket.get

firebasevertexai.*

firebasevertexai.configs.get
firebasevertexai.configs.update
firebasevertexai.promptTemplates.create
firebasevertexai.promptTemplates.delete
firebasevertexai.promptTemplates.get
firebasevertexai.promptTemplates.list
firebasevertexai.promptTemplates.update

logging.logEntries.list

monitoring.timeSeries.*

monitoring.timeSeries.create
monitoring.timeSeries.list

oauthconfig.verification.get

orgpolicy.policy.get

recommender.cloudFunctionsPerformanceInsights.*

recommender.cloudFunctionsPerformanceInsights.get
recommender.cloudFunctionsPerformanceInsights.list
recommender.cloudFunctionsPerformanceInsights.update

recommender.cloudFunctionsPerformanceRecommendations.*

recommender.cloudFunctionsPerformanceRecommendations.get
recommender.cloudFunctionsPerformanceRecommendations.list
recommender.cloudFunctionsPerformanceRecommendations.update

recommender.iamPolicyInsights.*

recommender.iamPolicyInsights.get
recommender.iamPolicyInsights.list
recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

recommender.iamPolicyRecommendations.get
recommender.iamPolicyRecommendations.list
recommender.iamPolicyRecommendations.update

recommender.locations.*

recommender.locations.get
recommender.locations.list

recommender.runServiceCostInsights.*

recommender.runServiceCostInsights.get
recommender.runServiceCostInsights.list
recommender.runServiceCostInsights.update

recommender.runServiceCostRecommendations.*

recommender.runServiceCostRecommendations.get
recommender.runServiceCostRecommendations.list
recommender.runServiceCostRecommendations.update

recommender.runServiceIdentityInsights.*

recommender.runServiceIdentityInsights.get
recommender.runServiceIdentityInsights.list
recommender.runServiceIdentityInsights.update

recommender.runServiceIdentityRecommendations.*

recommender.runServiceIdentityRecommendations.get
recommender.runServiceIdentityRecommendations.list
recommender.runServiceIdentityRecommendations.update

recommender.runServicePerformanceInsights.*

recommender.runServicePerformanceInsights.get
recommender.runServicePerformanceInsights.list
recommender.runServicePerformanceInsights.update

recommender.runServicePerformanceRecommendations.*

recommender.runServicePerformanceRecommendations.get
recommender.runServicePerformanceRecommendations.list
recommender.runServicePerformanceRecommendations.update

recommender.runServiceSecurityInsights.*

recommender.runServiceSecurityInsights.get
recommender.runServiceSecurityInsights.list
recommender.runServiceSecurityInsights.update

recommender.runServiceSecurityRecommendations.*

recommender.runServiceSecurityRecommendations.get
recommender.runServiceSecurityRecommendations.list
recommender.runServiceSecurityRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

recommender.storageBucketSoftDeleteInsights.get
recommender.storageBucketSoftDeleteInsights.list
recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

recommender.storageBucketSoftDeleteRecommendations.get
recommender.storageBucketSoftDeleteRecommendations.list
recommender.storageBucketSoftDeleteRecommendations.update

remotebuildexecution.blobs.get

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.*

run.configurations.get
run.configurations.list
run.executions.cancel
run.executions.delete
run.executions.get
run.executions.list
run.jobs.create
run.jobs.createTagBinding
run.jobs.delete
run.jobs.deleteTagBinding
run.jobs.get
run.jobs.getIamPolicy
run.jobs.list
run.jobs.listEffectiveTags
run.jobs.listTagBindings
run.jobs.run
run.jobs.runWithOverrides
run.jobs.setIamPolicy
run.jobs.update
run.locations.list
run.operations.delete
run.operations.get
run.operations.list
run.revisions.delete
run.revisions.get
run.revisions.list
run.routes.get
run.routes.invoke
run.routes.list
run.services.create
run.services.createTagBinding
run.services.delete
run.services.deleteTagBinding
run.services.get
run.services.getIamPolicy
run.services.list
run.services.listEffectiveTags
run.services.listTagBindings
run.services.setIamPolicy
run.services.update
run.tasks.get
run.tasks.list
run.workerpools.create
run.workerpools.delete
run.workerpools.get
run.workerpools.getIamPolicy
run.workerpools.list
run.workerpools.setIamPolicy
run.workerpools.update

runtimeconfig.configs.create

runtimeconfig.configs.delete

runtimeconfig.configs.get

runtimeconfig.configs.list

runtimeconfig.configs.update

runtimeconfig.operations.*

runtimeconfig.operations.get
runtimeconfig.operations.list

runtimeconfig.variables.create

runtimeconfig.variables.delete

runtimeconfig.variables.get

runtimeconfig.variables.list

runtimeconfig.variables.update

runtimeconfig.variables.watch

runtimeconfig.waiters.create

runtimeconfig.waiters.delete

runtimeconfig.waiters.get

runtimeconfig.waiters.list

runtimeconfig.waiters.update

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.anywhereCaches.*

storage.anywhereCaches.create
storage.anywhereCaches.disable
storage.anywhereCaches.get
storage.anywhereCaches.list
storage.anywhereCaches.pause
storage.anywhereCaches.resume
storage.anywhereCaches.update

storage.bucketOperations.*

storage.bucketOperations.cancel
storage.bucketOperations.get
storage.bucketOperations.list

storage.buckets.*

storage.buckets.create
storage.buckets.createTagBinding
storage.buckets.delete
storage.buckets.deleteTagBinding
storage.buckets.enableObjectRetention
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.getIpFilter
storage.buckets.getObjectInsights
storage.buckets.list
storage.buckets.listEffectiveTags
storage.buckets.listTagBindings
storage.buckets.relocate
storage.buckets.restore
storage.buckets.setIamPolicy
storage.buckets.setIpFilter
storage.buckets.update

storage.folders.*

storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename

storage.intelligenceConfigs.*

storage.intelligenceConfigs.get
storage.intelligenceConfigs.update

storage.managedFolders.*

storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.getIamPolicy
storage.managedFolders.list
storage.managedFolders.setIamPolicy

storage.multipartUploads.*

storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts

storage.objects.*

storage.objects.create
storage.objects.createContext
storage.objects.delete
storage.objects.deleteContext
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
storage.objects.move
storage.objects.overrideUnlockedRetention
storage.objects.restore
storage.objects.setIamPolicy
storage.objects.setRetention
storage.objects.update
storage.objects.updateContext

storagebatchoperations.*

storagebatchoperations.jobs.cancel
storagebatchoperations.jobs.create
storagebatchoperations.jobs.delete
storagebatchoperations.jobs.get
storagebatchoperations.jobs.list
storagebatchoperations.locations.get
storagebatchoperations.locations.list
storagebatchoperations.operations.cancel
storagebatchoperations.operations.delete
storagebatchoperations.operations.get
storagebatchoperations.operations.list

Firebase Develop Viewer

(roles/firebase.developViewer)

Read access to Firebase Develop products and Analytics.

apikeys.keys.get

apikeys.keys.list

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

clientauthconfig.brands.get

clientauthconfig.brands.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

cloudbuild.locations.get
cloudbuild.locations.list

cloudbuild.operations.*

cloudbuild.operations.get
cloudbuild.operations.list

cloudfunctions.functions.get

cloudfunctions.functions.getIamPolicy

cloudfunctions.functions.list

cloudfunctions.locations.list

cloudfunctions.operations.*

cloudfunctions.operations.get
cloudfunctions.operations.list

cloudnotifications.activities.list

datastore.backups.get

datastore.backups.list

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.get

datastore.entities.list

datastore.indexes.get

datastore.indexes.list

datastore.namespaces.*

datastore.namespaces.get
datastore.namespaces.list

datastore.statistics.*

datastore.statistics.get
datastore.statistics.list

errorreporting.groups.list

eventarc.channelConnections.get

eventarc.channelConnections.getIamPolicy

eventarc.channelConnections.list

eventarc.channels.get

eventarc.channels.getIamPolicy

eventarc.channels.list

eventarc.enrollments.get

eventarc.enrollments.getIamPolicy

eventarc.enrollments.list

eventarc.googleApiSources.get

eventarc.googleApiSources.getIamPolicy

eventarc.googleApiSources.list

eventarc.googleChannelConfigs.get

eventarc.kafkaSources.get

eventarc.kafkaSources.getIamPolicy

eventarc.kafkaSources.list

eventarc.locations.*

eventarc.locations.get
eventarc.locations.list

eventarc.messageBuses.get

eventarc.messageBuses.getIamPolicy

eventarc.messageBuses.list

eventarc.messageBuses.use

eventarc.multiProjectSources.collectGoogleApiEvents

eventarc.operations.get

eventarc.operations.list

eventarc.pipelines.get

eventarc.pipelines.getIamPolicy

eventarc.pipelines.list

eventarc.providers.*

eventarc.providers.get
eventarc.providers.list

eventarc.triggers.get

eventarc.triggers.getIamPolicy

eventarc.triggers.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.appAttestConfig.get

firebaseappcheck.automations.get

firebaseappcheck.automations.list

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

firebaseapphosting.locations.get
firebaseapphosting.locations.list

firebaseapphosting.operations.get

firebaseapphosting.operations.list

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.traffic.get

firebaseauth.configs.get

firebaseauth.users.get

firebasedatabase.instances.get

firebasedatabase.instances.list

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

firebasedataconnect.locations.get
firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.introspectGraphql

firebasedataconnect.services.list

firebaseextensions.configs.list

firebasehosting.sites.get

firebasehosting.sites.list

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

firebaserules.releases.get

firebaserules.releases.list

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

firebasevertexai.configs.get

firebasevertexai.promptTemplates.get

firebasevertexai.promptTemplates.list

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.locations.*

recommender.locations.get
recommender.locations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

remotebuildexecution.blobs.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.configurations.*

run.configurations.get
run.configurations.list

run.executions.get

run.executions.list

run.jobs.get

run.jobs.getIamPolicy

run.jobs.list

run.jobs.listEffectiveTags

run.jobs.listTagBindings

run.locations.list

run.operations.get

run.operations.list

run.revisions.get

run.revisions.list

run.routes.get

run.routes.list

run.services.get

run.services.getIamPolicy

run.services.list

run.services.listEffectiveTags

run.services.listTagBindings

run.tasks.*

run.tasks.get
run.tasks.list

run.workerpools.get

run.workerpools.getIamPolicy

run.workerpools.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list

Firebase Grow Admin

(roles/firebase.growthAdmin)

Full access to Firebase Grow products and Analytics.

apikeys.keys.get

apikeys.keys.list

clientauthconfig.clients.get

clientauthconfig.clients.list

cloudconfig.*

cloudconfig.configs.get
cloudconfig.configs.update

cloudmessaging.messages.create

cloudnotifications.activities.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.*

firebaseabt.experimentresults.get
firebaseabt.experiments.create
firebaseabt.experiments.delete
firebaseabt.experiments.get
firebaseabt.experiments.list
firebaseabt.experiments.update
firebaseabt.projectmetadata.get

firebaseanalytics.*

firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebasedynamiclinks.*

firebasedynamiclinks.destinations.list
firebasedynamiclinks.destinations.update
firebasedynamiclinks.domains.create
firebasedynamiclinks.domains.delete
firebasedynamiclinks.domains.get
firebasedynamiclinks.domains.list
firebasedynamiclinks.domains.update
firebasedynamiclinks.links.create
firebasedynamiclinks.links.get
firebasedynamiclinks.links.list
firebasedynamiclinks.links.update
firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseinappmessaging.*

firebaseinappmessaging.campaigns.create
firebaseinappmessaging.campaigns.delete
firebaseinappmessaging.campaigns.get
firebaseinappmessaging.campaigns.list
firebaseinappmessaging.campaigns.update

firebasemessagingcampaigns.*

firebasemessagingcampaigns.campaigns.create
firebasemessagingcampaigns.campaigns.delete
firebasemessagingcampaigns.campaigns.get
firebasemessagingcampaigns.campaigns.list
firebasemessagingcampaigns.campaigns.start
firebasemessagingcampaigns.campaigns.stop
firebasemessagingcampaigns.campaigns.update

firebasenotifications.*

firebasenotifications.messages.create
firebasenotifications.messages.delete
firebasenotifications.messages.get
firebasenotifications.messages.list
firebasenotifications.messages.update

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Grow Viewer

(roles/firebase.growthViewer)

Read access to Firebase Grow products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudconfig.configs.get

cloudnotifications.activities.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.experimentresults.get

firebaseabt.experiments.get

firebaseabt.experiments.list

firebaseabt.projectmetadata.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebasedynamiclinks.destinations.list

firebasedynamiclinks.domains.get

firebasedynamiclinks.domains.list

firebasedynamiclinks.links.get

firebasedynamiclinks.links.list

firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseinappmessaging.campaigns.get

firebaseinappmessaging.campaigns.list

firebasemessagingcampaigns.campaigns.get

firebasemessagingcampaigns.campaigns.list

firebasenotifications.messages.get

firebasenotifications.messages.list

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Service Management Service Agent

(roles/firebase.managementServiceAgent)

Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services.

apikeys.keys.create

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.update

appengine.applications.create

appengine.applications.get

appengine.applications.update

appengine.operations.get

appengine.services.list

bigquery.datasets.create

bigquery.datasets.get

bigquery.datasets.setIamPolicy

bigquery.datasets.update

bigquery.transfers.*

bigquery.transfers.get
bigquery.transfers.update

clientauthconfig.brands.create

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.create

clientauthconfig.clients.delete

clientauthconfig.clients.get

clientauthconfig.clients.getWithSecret

clientauthconfig.clients.list

clientauthconfig.clients.update

datastore.databases.create

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.databases.update

datastore.locations.*

datastore.locations.get
datastore.locations.list

datastore.operations.get

datastore.operations.list

firebase.clients.create

firebase.clients.delete

firebase.clients.get

firebase.clients.undelete

firebase.clients.update

firebase.projects.*

firebase.projects.delete
firebase.projects.get
firebase.projects.update

firebaseabt.experiments.delete

firebaseapphosting.domains.create

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.domains.update

firebaseauth.configs.create

firebaseauth.configs.get

firebaseauth.configs.update

firebasedataconnect.locations.*

firebasedataconnect.locations.get
firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.services.create

firebasehosting.sites.create

firebasehosting.sites.get

firebasehosting.sites.list

firebasehosting.sites.update

firebaserules.releases.create

firebaserules.releases.delete

firebaserules.releases.get

firebaserules.releases.list

firebaserules.releases.update

firebaserules.rulesets.create

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.defaultBucket.get

firebasevertexai.configs.*

firebasevertexai.configs.get
firebasevertexai.configs.update

iam.roles.get

iam.serviceAccounts.create

iam.serviceAccounts.get

iam.serviceAccounts.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.setIamPolicy

resourcemanager.projects.update

servicemanagement.services.bind

serviceusage.consumerpolicy.*

serviceusage.consumerpolicy.analyze
serviceusage.consumerpolicy.get
serviceusage.consumerpolicy.update

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

serviceusage.services.use

serviceusage.values.test

storage.bucketOperations.get

storage.bucketOperations.list

storage.buckets.create

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.buckets.setIamPolicy

storage.buckets.update

Firebase Quality Admin

(roles/firebase.qualityAdmin)

Full access to Firebase Quality products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappdistro.*

firebaseappdistro.groups.list
firebaseappdistro.groups.update
firebaseappdistro.releases.list
firebaseappdistro.releases.update
firebaseappdistro.testers.list
firebaseappdistro.testers.update

firebasecrash.*

firebasecrash.issues.update
firebasecrash.reports.get

firebasecrashlytics.*

firebasecrashlytics.config.get
firebasecrashlytics.config.update
firebasecrashlytics.data.get
firebasecrashlytics.issues.get
firebasecrashlytics.issues.list
firebasecrashlytics.issues.update
firebasecrashlytics.sessions.get

firebaseextensions.configs.list

firebaseperformance.*

firebaseperformance.config.update
firebaseperformance.data.get

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Quality Viewer

(roles/firebase.qualityViewer)

Read access to Firebase Quality products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappdistro.groups.list

firebaseappdistro.releases.list

firebaseappdistro.testers.list

firebasecrash.reports.get

firebasecrashlytics.config.get

firebasecrashlytics.data.get

firebasecrashlytics.issues.get

firebasecrashlytics.issues.list

firebasecrashlytics.sessions.get

firebaseextensions.configs.list

firebaseperformance.data.get

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Admin SDK Administrator Service Agent

(roles/firebase.sdkAdminServiceAgent)

Read and write access to Firebase products available in the Admin SDK

appengine.applications.get

cloudconfig.*

cloudconfig.configs.get
cloudconfig.configs.update

cloudmessaging.messages.create

databasesconsole.locations.*

databasesconsole.locations.get
databasesconsole.locations.list

databasesconsole.studioQueries.create

databasesconsole.studioQueries.delete

databasesconsole.studioQueries.search

databasesconsole.studioQueries.update

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.*

datastore.entities.allocateIds
datastore.entities.create
datastore.entities.delete
datastore.entities.get
datastore.entities.list
datastore.entities.update

datastore.indexes.get

datastore.indexes.list

datastore.insights.get

datastore.namespaces.*

datastore.namespaces.get
datastore.namespaces.list

datastore.statistics.*

datastore.statistics.get
datastore.statistics.list

firebase.clients.*

firebase.clients.create
firebase.clients.delete
firebase.clients.get
firebase.clients.list
firebase.clients.undelete
firebase.clients.update

firebase.projects.get

firebase.projects.update

firebaseappcheck.*

firebaseappcheck.appAttestConfig.get
firebaseappcheck.appAttestConfig.update
firebaseappcheck.appCheckTokens.verify
firebaseappcheck.automations.create
firebaseappcheck.automations.delete
firebaseappcheck.automations.get
firebaseappcheck.automations.list
firebaseappcheck.automations.resume
firebaseappcheck.automations.suspend
firebaseappcheck.automations.update
firebaseappcheck.debugTokens.get
firebaseappcheck.debugTokens.update
firebaseappcheck.deviceCheckConfig.get
firebaseappcheck.deviceCheckConfig.update
firebaseappcheck.playIntegrityConfig.get
firebaseappcheck.playIntegrityConfig.update
firebaseappcheck.recaptchaEnterpriseConfig.get
firebaseappcheck.recaptchaEnterpriseConfig.update
firebaseappcheck.recaptchaV3Config.get
firebaseappcheck.recaptchaV3Config.update
firebaseappcheck.resourcePolicies.get
firebaseappcheck.resourcePolicies.update
firebaseappcheck.safetyNetConfig.get
firebaseappcheck.safetyNetConfig.update
firebaseappcheck.services.get
firebaseappcheck.services.update

firebaseauth.configs.create

firebaseauth.configs.get

firebaseauth.configs.getSecret

firebaseauth.configs.update

firebaseauth.users.*

firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update

firebasedatabase.*

firebasedatabase.instances.create
firebasedatabase.instances.delete
firebasedatabase.instances.disable
firebasedatabase.instances.get
firebasedatabase.instances.list
firebasedatabase.instances.reenable
firebasedatabase.instances.undelete
firebasedatabase.instances.update

firebasedataconnect.*

firebasedataconnect.connectorRevisions.delete
firebasedataconnect.connectorRevisions.get
firebasedataconnect.connectorRevisions.list
firebasedataconnect.connectors.create
firebasedataconnect.connectors.delete
firebasedataconnect.connectors.get
firebasedataconnect.connectors.impersonateMutation
firebasedataconnect.connectors.impersonateQuery
firebasedataconnect.connectors.list
firebasedataconnect.connectors.update
firebasedataconnect.locations.get
firebasedataconnect.locations.list
firebasedataconnect.operations.cancel
firebasedataconnect.operations.delete
firebasedataconnect.operations.get
firebasedataconnect.operations.list
firebasedataconnect.schemaRevisions.delete
firebasedataconnect.schemaRevisions.get
firebasedataconnect.schemaRevisions.list
firebasedataconnect.schemas.create
firebasedataconnect.schemas.delete
firebasedataconnect.schemas.get
firebasedataconnect.schemas.list
firebasedataconnect.schemas.update
firebasedataconnect.services.create
firebasedataconnect.services.delete
firebasedataconnect.services.executeGraphql
firebasedataconnect.services.executeGraphqlRead
firebasedataconnect.services.get
firebasedataconnect.services.introspectGraphql
firebasedataconnect.services.list
firebasedataconnect.services.update

firebasehosting.*

firebasehosting.sites.create
firebasehosting.sites.delete
firebasehosting.sites.get
firebasehosting.sites.list
firebasehosting.sites.update

firebaseml.*

firebaseml.models.create
firebaseml.models.delete
firebaseml.models.get
firebaseml.models.list
firebaseml.models.update
firebaseml.modelversions.create
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaseml.modelversions.update

firebasenotifications.*

firebasenotifications.messages.create
firebasenotifications.messages.delete
firebasenotifications.messages.get
firebasenotifications.messages.list
firebasenotifications.messages.update

firebaserules.releases.get

firebaserules.releases.list

firebaserules.releases.update

firebaserules.rulesets.create

firebaserules.rulesets.delete

firebaserules.rulesets.get

firebaserules.rulesets.list

identitytoolkit.*

identitytoolkit.tenants.create
identitytoolkit.tenants.delete
identitytoolkit.tenants.get
identitytoolkit.tenants.getIamPolicy
identitytoolkit.tenants.list
identitytoolkit.tenants.setIamPolicy
identitytoolkit.tenants.update

monitoring.timeSeries.create

orgpolicy.policy.get

resourcemanager.projects.get

resourcemanager.projects.list

resourcemanager.projects.update

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.list

storage.buckets.update

storage.folders.*

storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename

storage.managedFolders.create

storage.managedFolders.delete

storage.managedFolders.get

storage.managedFolders.list

storage.multipartUploads.*

storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts

storage.objects.*

storage.objects.create
storage.objects.createContext
storage.objects.delete
storage.objects.deleteContext
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
storage.objects.move
storage.objects.overrideUnlockedRetention
storage.objects.restore
storage.objects.setIamPolicy
storage.objects.setRetention
storage.objects.update
storage.objects.updateContext

Firebase SDK Provisioning Service Agent

(roles/firebase.sdkProvisioningServiceAgent)

Access to provision apps with the Admin SDK.

apikeys.keys.list

clientauthconfig.clients.list

cloudmessaging.messages.create

firebase.clients.create

servicemanagement.services.bind

serviceusage.consumerpolicy.*

serviceusage.consumerpolicy.analyze
serviceusage.consumerpolicy.get
serviceusage.consumerpolicy.update

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.services.enable

serviceusage.services.get

serviceusage.values.test

Firebase Viewer

(roles/firebase.viewer)

Read-only access to Firebase products.

apikeys.keys.get

apikeys.keys.list

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

clientauthconfig.brands.get

clientauthconfig.brands.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

cloudbuild.locations.get
cloudbuild.locations.list

cloudbuild.operations.*

cloudbuild.operations.get
cloudbuild.operations.list

cloudconfig.configs.get

cloudfunctions.functions.get

cloudfunctions.functions.getIamPolicy

cloudfunctions.functions.list

cloudfunctions.locations.list

cloudfunctions.operations.*

cloudfunctions.operations.get
cloudfunctions.operations.list

cloudnotifications.activities.list

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.get

cloudtoolresults.executions.get

cloudtoolresults.executions.list

cloudtoolresults.histories.get

cloudtoolresults.histories.list

cloudtoolresults.settings.get

cloudtoolresults.steps.get

cloudtoolresults.steps.list

datastore.backups.get

datastore.backups.list

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.get

datastore.entities.list

datastore.indexes.get

datastore.indexes.list

datastore.namespaces.*

datastore.namespaces.get
datastore.namespaces.list

datastore.statistics.*

datastore.statistics.get
datastore.statistics.list

errorreporting.groups.list

eventarc.channelConnections.get

eventarc.channelConnections.getIamPolicy

eventarc.channelConnections.list

eventarc.channels.get

eventarc.channels.getIamPolicy

eventarc.channels.list

eventarc.enrollments.get

eventarc.enrollments.getIamPolicy

eventarc.enrollments.list

eventarc.googleApiSources.get

eventarc.googleApiSources.getIamPolicy

eventarc.googleApiSources.list

eventarc.googleChannelConfigs.get

eventarc.kafkaSources.get

eventarc.kafkaSources.getIamPolicy

eventarc.kafkaSources.list

eventarc.locations.*

eventarc.locations.get
eventarc.locations.list

eventarc.messageBuses.get

eventarc.messageBuses.getIamPolicy

eventarc.messageBuses.list

eventarc.messageBuses.use

eventarc.multiProjectSources.collectGoogleApiEvents

eventarc.operations.get

eventarc.operations.list

eventarc.pipelines.get

eventarc.pipelines.getIamPolicy

eventarc.pipelines.list

eventarc.providers.*

eventarc.providers.get
eventarc.providers.list

eventarc.triggers.get

eventarc.triggers.getIamPolicy

eventarc.triggers.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.experimentresults.get

firebaseabt.experiments.get

firebaseabt.experiments.list

firebaseabt.projectmetadata.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.appAttestConfig.get

firebaseappcheck.automations.get

firebaseappcheck.automations.list

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

firebaseappdistro.groups.list

firebaseappdistro.releases.list

firebaseappdistro.testers.list

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

firebaseapphosting.locations.get
firebaseapphosting.locations.list

firebaseapphosting.operations.get

firebaseapphosting.operations.list

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.traffic.get

firebaseauth.configs.get

firebaseauth.users.get

firebasecrash.reports.get

firebasecrashlytics.config.get

firebasecrashlytics.data.get

firebasecrashlytics.issues.get

firebasecrashlytics.issues.list

firebasecrashlytics.sessions.get

firebasedatabase.instances.get

firebasedatabase.instances.list

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

firebasedataconnect.locations.get
firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.introspectGraphql

firebasedataconnect.services.list

firebasedynamiclinks.destinations.list

firebasedynamiclinks.domains.get

firebasedynamiclinks.domains.list

firebasedynamiclinks.links.get

firebasedynamiclinks.links.list

firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseextensionspublisher.extensions.get

firebaseextensionspublisher.extensions.list

firebasehosting.sites.get

firebasehosting.sites.list

firebaseinappmessaging.campaigns.get

firebaseinappmessaging.campaigns.list

firebasemessagingcampaigns.campaigns.get

firebasemessagingcampaigns.campaigns.list

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

firebasenotifications.messages.get

firebasenotifications.messages.list

firebaseperformance.data.get

firebaserules.releases.get

firebaserules.releases.list

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

firebasevertexai.configs.get

firebasevertexai.promptTemplates.get

firebasevertexai.promptTemplates.list

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.locations.*

recommender.locations.get
recommender.locations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

remotebuildexecution.blobs.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.configurations.*

run.configurations.get
run.configurations.list

run.executions.get

run.executions.list

run.jobs.get

run.jobs.getIamPolicy

run.jobs.list

run.jobs.listEffectiveTags

run.jobs.listTagBindings

run.locations.list

run.operations.get

run.operations.list

run.revisions.get

run.revisions.list

run.routes.get

run.routes.list

run.services.get

run.services.getIamPolicy

run.services.list

run.services.listEffectiveTags

run.services.listTagBindings

run.tasks.*

run.tasks.get
run.tasks.list

run.workerpools.get

run.workerpools.getIamPolicy

run.workerpools.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list

Firebase permissions

Permission	Included in roles
`firebase.billingPlans.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Test Lab Admin (`roles/cloudtestservice.testAdmin`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`)
`firebase.billingPlans.update`	Owner (`roles/owner`) Firebase Admin (`roles/firebase.admin`)
`firebase.clients.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase SDK Provisioning Service Agent (`roles/firebase.sdkProvisioningServiceAgent`) OAuth Config Editor (`roles/oauthconfig.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebase.clients.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebase.clients.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Remote Config Admin (`roles/cloudconfig.admin`) Firebase Remote Config Viewer (`roles/cloudconfig.viewer`) Firebase Test Lab Admin (`roles/cloudtestservice.testAdmin`) Firebase Test Lab Viewer (`roles/cloudtestservice.testViewer`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase A/B Testing Admin (`roles/firebaseabt.admin`) Firebase A/B Testing Viewer (`roles/firebaseabt.viewer`) Firebase App Distribution Admin (`roles/firebaseappdistro.admin`) Firebase App Distribution Viewer (`roles/firebaseappdistro.viewer`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Firebase Authentication Viewer (`roles/firebaseauth.viewer`) Firebase Crash Symbol Uploader (`roles/firebasecrash.symbolMappingsAdmin`) Firebase Crashlytics Admin (`roles/firebasecrashlytics.admin`) Firebase Crashlytics Viewer (`roles/firebasecrashlytics.viewer`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Firebase Realtime Database Viewer (`roles/firebasedatabase.viewer`) Firebase Dynamic Links Admin (`roles/firebasedynamiclinks.admin`) Firebase Dynamic Links Viewer (`roles/firebasedynamiclinks.viewer`) Firebase Extensions Developer (`roles/firebaseextensions.developer`) Firebase Extensions Viewer (`roles/firebaseextensions.viewer`) Firebase Extensions Publisher - Extensions Admin (`roles/firebaseextensionspublisher.extensionsAdmin`) Firebase Extensions Publisher - Extensions Viewer (`roles/firebaseextensionspublisher.extensionsViewer`) Firebase Hosting Admin (`roles/firebasehosting.admin`) Firebase Hosting Viewer (`roles/firebasehosting.viewer`) Firebase In-App Messaging Admin (`roles/firebaseinappmessaging.admin`) Firebase In-App Messaging Viewer (`roles/firebaseinappmessaging.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Firebase Cloud Messaging Admin (`roles/firebasenotifications.admin`) Firebase Cloud Messaging Viewer (`roles/firebasenotifications.viewer`) Firebase Performance Reporting Admin (`roles/firebaseperformance.admin`) Firebase Performance Reporting Viewer (`roles/firebaseperformance.viewer`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`) Support User (`roles/iam.supportUser`) OAuth Config Editor (`roles/oauthconfig.editor`) OAuth Config Viewer (`roles/oauthconfig.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebase.clients.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Remote Config Admin (`roles/cloudconfig.admin`) Firebase Remote Config Viewer (`roles/cloudconfig.viewer`) Firebase Test Lab Admin (`roles/cloudtestservice.testAdmin`) Firebase Test Lab Viewer (`roles/cloudtestservice.testViewer`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase A/B Testing Admin (`roles/firebaseabt.admin`) Firebase A/B Testing Viewer (`roles/firebaseabt.viewer`) Firebase App Distribution Admin (`roles/firebaseappdistro.admin`) Firebase App Distribution Viewer (`roles/firebaseappdistro.viewer`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Firebase Authentication Viewer (`roles/firebaseauth.viewer`) Firebase Crash Symbol Uploader (`roles/firebasecrash.symbolMappingsAdmin`) Firebase Crashlytics Admin (`roles/firebasecrashlytics.admin`) Firebase Crashlytics Viewer (`roles/firebasecrashlytics.viewer`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Firebase Realtime Database Viewer (`roles/firebasedatabase.viewer`) Firebase Dynamic Links Admin (`roles/firebasedynamiclinks.admin`) Firebase Dynamic Links Viewer (`roles/firebasedynamiclinks.viewer`) Firebase Extensions Developer (`roles/firebaseextensions.developer`) Firebase Extensions Viewer (`roles/firebaseextensions.viewer`) Firebase Extensions Publisher - Extensions Admin (`roles/firebaseextensionspublisher.extensionsAdmin`) Firebase Extensions Publisher - Extensions Viewer (`roles/firebaseextensionspublisher.extensionsViewer`) Firebase Hosting Admin (`roles/firebasehosting.admin`) Firebase Hosting Viewer (`roles/firebasehosting.viewer`) Firebase In-App Messaging Admin (`roles/firebaseinappmessaging.admin`) Firebase In-App Messaging Viewer (`roles/firebaseinappmessaging.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Firebase Cloud Messaging Admin (`roles/firebasenotifications.admin`) Firebase Cloud Messaging Viewer (`roles/firebasenotifications.viewer`) Firebase Performance Reporting Admin (`roles/firebaseperformance.admin`) Firebase Performance Reporting Viewer (`roles/firebaseperformance.viewer`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) OAuth Config Editor (`roles/oauthconfig.editor`) OAuth Config Viewer (`roles/oauthconfig.viewer`)
`firebase.clients.undelete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebase.clients.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) OAuth Config Editor (`roles/oauthconfig.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebase.links.create`	Owner (`roles/owner`) Firebase Admin (`roles/firebase.admin`)
`firebase.links.delete`	Owner (`roles/owner`) Firebase Admin (`roles/firebase.admin`)
`firebase.links.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`firebase.links.update`	Owner (`roles/owner`) Firebase Admin (`roles/firebase.admin`)
`firebase.playLinks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`)
`firebase.playLinks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`firebase.playLinks.update`	Owner (`roles/owner`) Firebase Admin (`roles/firebase.admin`)
`firebase.projects.delete`	Owner (`roles/owner`) Firebase Admin (`roles/firebase.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebase.projects.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Actions Admin (`roles/actions.Admin`) Actions Viewer (`roles/actions.Viewer`) Firebase Remote Config Admin (`roles/cloudconfig.admin`) Firebase Remote Config Viewer (`roles/cloudconfig.viewer`) Firebase Test Lab Admin (`roles/cloudtestservice.testAdmin`) Firebase Test Lab Viewer (`roles/cloudtestservice.testViewer`) Firebase Admin (`roles/firebase.admin`) Firebase Analytics Admin (`roles/firebase.analyticsAdmin`) Firebase Analytics Viewer (`roles/firebase.analyticsViewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Grow Admin (`roles/firebase.growthAdmin`) Firebase Grow Viewer (`roles/firebase.growthViewer`) Firebase Quality Admin (`roles/firebase.qualityAdmin`) Firebase Quality Viewer (`roles/firebase.qualityViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase A/B Testing Admin (`roles/firebaseabt.admin`) Firebase A/B Testing Viewer (`roles/firebaseabt.viewer`) Firebase App Distribution Admin (`roles/firebaseappdistro.admin`) Firebase App Distribution Viewer (`roles/firebaseappdistro.viewer`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Firebase Authentication Viewer (`roles/firebaseauth.viewer`) Firebase Crashlytics Admin (`roles/firebasecrashlytics.admin`) Firebase Crashlytics Viewer (`roles/firebasecrashlytics.viewer`) Firebase Realtime Database Admin (`roles/firebasedatabase.admin`) Firebase Realtime Database Viewer (`roles/firebasedatabase.viewer`) Firebase Dynamic Links Admin (`roles/firebasedynamiclinks.admin`) Firebase Dynamic Links Viewer (`roles/firebasedynamiclinks.viewer`) Firebase Extensions Developer (`roles/firebaseextensions.developer`) Firebase Extensions Viewer (`roles/firebaseextensions.viewer`) Firebase Extensions Publisher - Extensions Admin (`roles/firebaseextensionspublisher.extensionsAdmin`) Firebase Extensions Publisher - Extensions Viewer (`roles/firebaseextensionspublisher.extensionsViewer`) Firebase Hosting Admin (`roles/firebasehosting.admin`) Firebase Hosting Viewer (`roles/firebasehosting.viewer`) Firebase In-App Messaging Admin (`roles/firebaseinappmessaging.admin`) Firebase In-App Messaging Viewer (`roles/firebaseinappmessaging.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Firebase Cloud Messaging Admin (`roles/firebasenotifications.admin`) Firebase Cloud Messaging Viewer (`roles/firebasenotifications.viewer`) Firebase Performance Reporting Admin (`roles/firebaseperformance.admin`) Firebase Performance Reporting Viewer (`roles/firebaseperformance.viewer`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`) Databases Admin (`roles/iam.databasesAdmin`) Infrastructure Administrator (`roles/iam.infrastructureAdmin`) Support User (`roles/iam.supportUser`) Storage Admin (`roles/storage.admin`) Storage HMAC Key Admin (`roles/storage.hmacKeyAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Composer API Service Agent (`roles/composer.serviceAgent`) Cloud Dataflow Service Agent (`roles/dataflow.serviceAgent`) Cloud Data Fusion API Service Agent (`roles/datafusion.serviceAgent`) Datapipelines Service Agent (`roles/datapipelines.serviceAgent`) Cloud Dataplex Service Agent (`roles/dataplex.serviceAgent`) Dataproc Service Agent (`roles/dataproc.serviceAgent`) DLP API Service Agent (`roles/dlp.serviceAgent`) Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`) AI Platform Service Agent (`roles/ml.serviceAgent`) Visual Inspection AI Service Agent (`roles/visualinspection.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`firebase.projects.update`	Owner (`roles/owner`) Editor (`roles/editor`) Actions Admin (`roles/actions.Admin`) Firebase Admin (`roles/firebase.admin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)

Firebase roles and permissions

Firebase roles

Firebase Admin

Firebase Analytics Admin

Firebase Analytics Viewer

Firebase App Distribution Admin SDK Service Agent

Firebase Develop Admin

Firebase Develop Viewer

Firebase Grow Admin

Firebase Grow Viewer

Firebase Service Management Service Agent

Firebase Quality Admin

Firebase Quality Viewer

Firebase Admin SDK Administrator Service Agent

Firebase SDK Provisioning Service Agent

Firebase Viewer

Firebase permissions

`firebase.billingPlans.get`

`firebase.billingPlans.update`

`firebase.clients.create`

`firebase.clients.delete`

`firebase.clients.get`

`firebase.clients.list`

`firebase.clients.undelete`

`firebase.clients.update`

`firebase.links.create`

`firebase.links.delete`

`firebase.links.list`

`firebase.links.update`

`firebase.playLinks.get`

`firebase.playLinks.list`

`firebase.playLinks.update`

`firebase.projects.delete`

`firebase.projects.get`

`firebase.projects.update`

Firebase roles and permissions Stay organized with collections Save and categorize content based on your preferences.

Firebase roles

Firebase Admin

Firebase Analytics Admin

Firebase Analytics Viewer

Firebase App Distribution Admin SDK Service Agent

Firebase Develop Admin

Firebase Develop Viewer

Firebase Grow Admin

Firebase Grow Viewer

Firebase Service Management Service Agent

Firebase Quality Admin

Firebase Quality Viewer

Firebase Admin SDK Administrator Service Agent

Firebase SDK Provisioning Service Agent

Firebase Viewer

Firebase permissions

firebase.billingPlans.get

firebase.billingPlans.update

firebase.clients.create

firebase.clients.delete

firebase.clients.get

firebase.clients.list

firebase.clients.undelete

firebase.clients.update

firebase.links.create

firebase.links.delete

firebase.links.list

firebase.links.update

firebase.playLinks.get

firebase.playLinks.list

firebase.playLinks.update

firebase.projects.delete

firebase.projects.get

firebase.projects.update

Firebase roles and permissions

`firebase.billingPlans.get`

`firebase.billingPlans.update`

`firebase.clients.create`

`firebase.clients.delete`

`firebase.clients.get`

`firebase.clients.list`

`firebase.clients.undelete`

`firebase.clients.update`

`firebase.links.create`

`firebase.links.delete`

`firebase.links.list`

`firebase.links.update`

`firebase.playLinks.get`

`firebase.playLinks.list`

`firebase.playLinks.update`

`firebase.projects.delete`

`firebase.projects.get`

`firebase.projects.update`