Firebase Admin

(roles/firebase.admin)

Full access to Firebase products.

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.lookup

appengine.applications.get

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

• artifactregistry.dockerimages.get
• artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

• artifactregistry.locations.get
• artifactregistry.locations.list

artifactregistry.mavenartifacts.*

• artifactregistry.mavenartifacts.get
• artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

• artifactregistry.npmpackages.get
• artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

• artifactregistry.pythonpackages.get
• artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

automl.*

• automl.annotationSpecs.create
• automl.annotationSpecs.delete
• automl.annotationSpecs.get
• automl.annotationSpecs.list
• automl.annotationSpecs.update
• automl.annotations.approve
• automl.annotations.create
• automl.annotations.list
• automl.annotations.manipulate
• automl.annotations.reject
• automl.columnSpecs.get
• automl.columnSpecs.list
• automl.columnSpecs.update
• automl.datasets.create
• automl.datasets.delete
• automl.datasets.export
• automl.datasets.get
• automl.datasets.getIamPolicy
• automl.datasets.import
• automl.datasets.list
• automl.datasets.setIamPolicy
• automl.datasets.update
• automl.examples.delete
• automl.examples.get
• automl.examples.list
• automl.examples.update
• automl.files.delete
• automl.files.list
• automl.humanAnnotationTasks.create
• automl.humanAnnotationTasks.delete
• automl.humanAnnotationTasks.get
• automl.humanAnnotationTasks.list
• automl.locations.get
• automl.locations.getIamPolicy
• automl.locations.list
• automl.locations.setIamPolicy
• automl.modelEvaluations.create
• automl.modelEvaluations.get
• automl.modelEvaluations.list
• automl.models.create
• automl.models.delete
• automl.models.deploy
• automl.models.export
• automl.models.get
• automl.models.getIamPolicy
• automl.models.list
• automl.models.predict
• automl.models.setIamPolicy
• automl.models.undeploy
• automl.operations.cancel
• automl.operations.delete
• automl.operations.get
• automl.operations.list
• automl.tableSpecs.get
• automl.tableSpecs.list
• automl.tableSpecs.update

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.create

clientauthconfig.clients.delete

clientauthconfig.clients.get

clientauthconfig.clients.list

clientauthconfig.clients.update

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

• cloudbuild.locations.get
• cloudbuild.locations.list

cloudbuild.operations.*

• cloudbuild.operations.get
• cloudbuild.operations.list

cloudconfig.*

• cloudconfig.configs.get
• cloudconfig.configs.update

cloudfunctions.*

• cloudfunctions.functions.call
• cloudfunctions.functions.create
• cloudfunctions.functions.delete
• cloudfunctions.functions.generationUpgrade
• cloudfunctions.functions.get
• cloudfunctions.functions.getIamPolicy
• cloudfunctions.functions.invoke
• cloudfunctions.functions.list
• cloudfunctions.functions.setIamPolicy
• cloudfunctions.functions.sourceCodeGet
• cloudfunctions.functions.sourceCodeSet
• cloudfunctions.functions.update
• cloudfunctions.locations.list
• cloudfunctions.operations.get
• cloudfunctions.operations.list

cloudkms.keyHandles.*

• cloudkms.keyHandles.create
• cloudkms.keyHandles.get
• cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudmessaging.messages.create

cloudnotifications.activities.list

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.*

• cloudtestservice.matrices.create
• cloudtestservice.matrices.get
• cloudtestservice.matrices.update

cloudtoolresults.*

• cloudtoolresults.executions.create
• cloudtoolresults.executions.get
• cloudtoolresults.executions.list
• cloudtoolresults.executions.update
• cloudtoolresults.histories.create
• cloudtoolresults.histories.get
• cloudtoolresults.histories.list
• cloudtoolresults.settings.create
• cloudtoolresults.settings.get
• cloudtoolresults.settings.update
• cloudtoolresults.steps.create
• cloudtoolresults.steps.get
• cloudtoolresults.steps.list
• cloudtoolresults.steps.update

databasesconsole.locations.*

• databasesconsole.locations.get
• databasesconsole.locations.list

databasesconsole.studioQueries.*

• databasesconsole.studioQueries.create
• databasesconsole.studioQueries.delete
• databasesconsole.studioQueries.get
• databasesconsole.studioQueries.list
• databasesconsole.studioQueries.search
• databasesconsole.studioQueries.update

datastore.*

• datastore.backupSchedules.create
• datastore.backupSchedules.delete
• datastore.backupSchedules.get
• datastore.backupSchedules.list
• datastore.backupSchedules.update
• datastore.backups.delete
• datastore.backups.get
• datastore.backups.list
• datastore.backups.restoreDatabase
• datastore.databases.bulkDelete
• datastore.databases.clone
• datastore.databases.create
• datastore.databases.createTagBinding
• datastore.databases.delete
• datastore.databases.deleteTagBinding
• datastore.databases.export
• datastore.databases.get
• datastore.databases.getMetadata
• datastore.databases.import
• datastore.databases.list
• datastore.databases.listEffectiveTags
• datastore.databases.listTagBindings
• datastore.databases.update
• datastore.entities.allocateIds
• datastore.entities.create
• datastore.entities.delete
• datastore.entities.get
• datastore.entities.list
• datastore.entities.update
• datastore.indexes.create
• datastore.indexes.delete
• datastore.indexes.get
• datastore.indexes.list
• datastore.indexes.update
• datastore.insights.get
• datastore.keyVisualizerScans.get
• datastore.keyVisualizerScans.list
• datastore.locations.get
• datastore.locations.list
• datastore.namespaces.get
• datastore.namespaces.list
• datastore.operations.cancel
• datastore.operations.delete
• datastore.operations.get
• datastore.operations.list
• datastore.statistics.get
• datastore.statistics.list
• datastore.userCreds.create
• datastore.userCreds.delete
• datastore.userCreds.get
• datastore.userCreds.list
• datastore.userCreds.update

errorreporting.groups.list

eventarc.*

• eventarc.channelConnections.create
• eventarc.channelConnections.delete
• eventarc.channelConnections.get
• eventarc.channelConnections.getIamPolicy
• eventarc.channelConnections.list
• eventarc.channelConnections.publish
• eventarc.channelConnections.setIamPolicy
• eventarc.channels.attach
• eventarc.channels.create
• eventarc.channels.delete
• eventarc.channels.get
• eventarc.channels.getIamPolicy
• eventarc.channels.list
• eventarc.channels.publish
• eventarc.channels.setIamPolicy
• eventarc.channels.undelete
• eventarc.channels.update
• eventarc.enrollments.create
• eventarc.enrollments.delete
• eventarc.enrollments.get
• eventarc.enrollments.getIamPolicy
• eventarc.enrollments.list
• eventarc.enrollments.setIamPolicy
• eventarc.enrollments.update
• eventarc.events.receiveAuditLogWritten
• eventarc.events.receiveEvent
• eventarc.googleApiSources.create
• eventarc.googleApiSources.delete
• eventarc.googleApiSources.get
• eventarc.googleApiSources.getIamPolicy
• eventarc.googleApiSources.list
• eventarc.googleApiSources.setIamPolicy
• eventarc.googleApiSources.update
• eventarc.googleChannelConfigs.get
• eventarc.googleChannelConfigs.update
• eventarc.kafkaSources.create
• eventarc.kafkaSources.delete
• eventarc.kafkaSources.get
• eventarc.kafkaSources.getIamPolicy
• eventarc.kafkaSources.list
• eventarc.kafkaSources.setIamPolicy
• eventarc.locations.get
• eventarc.locations.list
• eventarc.messageBuses.create
• eventarc.messageBuses.delete
• eventarc.messageBuses.get
• eventarc.messageBuses.getIamPolicy
• eventarc.messageBuses.list
• eventarc.messageBuses.publish
• eventarc.messageBuses.setIamPolicy
• eventarc.messageBuses.update
• eventarc.messageBuses.use
• eventarc.multiProjectSources.collectGoogleApiEvents
• eventarc.operations.cancel
• eventarc.operations.delete
• eventarc.operations.get
• eventarc.operations.list
• eventarc.pipelines.create
• eventarc.pipelines.delete
• eventarc.pipelines.get
• eventarc.pipelines.getIamPolicy
• eventarc.pipelines.list
• eventarc.pipelines.setIamPolicy
• eventarc.pipelines.update
• eventarc.providers.get
• eventarc.providers.list
• eventarc.triggers.create
• eventarc.triggers.delete
• eventarc.triggers.get
• eventarc.triggers.getIamPolicy
• eventarc.triggers.list
• eventarc.triggers.setIamPolicy
• eventarc.triggers.undelete
• eventarc.triggers.update

fcmdata.deliverydata.list

firebase.*

• firebase.billingPlans.get
• firebase.billingPlans.update
• firebase.clients.create
• firebase.clients.delete
• firebase.clients.get
• firebase.clients.list
• firebase.clients.undelete
• firebase.clients.update
• firebase.links.create
• firebase.links.delete
• firebase.links.list
• firebase.links.update
• firebase.playLinks.get
• firebase.playLinks.list
• firebase.playLinks.update
• firebase.projects.delete
• firebase.projects.get
• firebase.projects.update

firebaseabt.*

• firebaseabt.experimentresults.get
• firebaseabt.experiments.create
• firebaseabt.experiments.delete
• firebaseabt.experiments.get
• firebaseabt.experiments.list
• firebaseabt.experiments.update
• firebaseabt.projectmetadata.get

firebaseanalytics.*

• firebaseanalytics.resources.googleAnalyticsEdit
• firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.*

• firebaseappcheck.appAttestConfig.get
• firebaseappcheck.appAttestConfig.update
• firebaseappcheck.appCheckTokens.verify
• firebaseappcheck.automations.create
• firebaseappcheck.automations.delete
• firebaseappcheck.automations.get
• firebaseappcheck.automations.list
• firebaseappcheck.automations.resume
• firebaseappcheck.automations.suspend
• firebaseappcheck.automations.update
• firebaseappcheck.debugTokens.get
• firebaseappcheck.debugTokens.update
• firebaseappcheck.deviceCheckConfig.get
• firebaseappcheck.deviceCheckConfig.update
• firebaseappcheck.playIntegrityConfig.get
• firebaseappcheck.playIntegrityConfig.update
• firebaseappcheck.recaptchaEnterpriseConfig.get
• firebaseappcheck.recaptchaEnterpriseConfig.update
• firebaseappcheck.recaptchaV3Config.get
• firebaseappcheck.recaptchaV3Config.update
• firebaseappcheck.resourcePolicies.get
• firebaseappcheck.resourcePolicies.update
• firebaseappcheck.safetyNetConfig.get
• firebaseappcheck.safetyNetConfig.update
• firebaseappcheck.services.get
• firebaseappcheck.services.update

firebaseappdistro.*

• firebaseappdistro.groups.list
• firebaseappdistro.groups.update
• firebaseappdistro.releases.list
• firebaseappdistro.releases.update
• firebaseappdistro.testers.list
• firebaseappdistro.testers.update

firebaseapphosting.*

• firebaseapphosting.backends.create
• firebaseapphosting.backends.delete
• firebaseapphosting.backends.get
• firebaseapphosting.backends.list
• firebaseapphosting.backends.update
• firebaseapphosting.builds.create
• firebaseapphosting.builds.delete
• firebaseapphosting.builds.get
• firebaseapphosting.builds.list
• firebaseapphosting.builds.update
• firebaseapphosting.domains.create
• firebaseapphosting.domains.delete
• firebaseapphosting.domains.get
• firebaseapphosting.domains.list
• firebaseapphosting.domains.update
• firebaseapphosting.locations.get
• firebaseapphosting.locations.list
• firebaseapphosting.operations.cancel
• firebaseapphosting.operations.delete
• firebaseapphosting.operations.get
• firebaseapphosting.operations.list
• firebaseapphosting.rollouts.create
• firebaseapphosting.rollouts.delete
• firebaseapphosting.rollouts.get
• firebaseapphosting.rollouts.list
• firebaseapphosting.rollouts.update
• firebaseapphosting.traffic.get
• firebaseapphosting.traffic.update

firebaseauth.*

• firebaseauth.configs.create
• firebaseauth.configs.get
• firebaseauth.configs.getHashConfig
• firebaseauth.configs.getSecret
• firebaseauth.configs.update
• firebaseauth.users.create
• firebaseauth.users.createSession
• firebaseauth.users.delete
• firebaseauth.users.get
• firebaseauth.users.sendEmail
• firebaseauth.users.update

firebasecrash.*

• firebasecrash.issues.update
• firebasecrash.reports.get

firebasecrashlytics.*

• firebasecrashlytics.config.get
• firebasecrashlytics.config.update
• firebasecrashlytics.data.get
• firebasecrashlytics.issues.get
• firebasecrashlytics.issues.list
• firebasecrashlytics.issues.update
• firebasecrashlytics.sessions.get

firebasedatabase.*

• firebasedatabase.instances.create
• firebasedatabase.instances.delete
• firebasedatabase.instances.disable
• firebasedatabase.instances.get
• firebasedatabase.instances.list
• firebasedatabase.instances.reenable
• firebasedatabase.instances.undelete
• firebasedatabase.instances.update

firebasedataconnect.*

• firebasedataconnect.connectorRevisions.delete
• firebasedataconnect.connectorRevisions.get
• firebasedataconnect.connectorRevisions.list
• firebasedataconnect.connectors.create
• firebasedataconnect.connectors.delete
• firebasedataconnect.connectors.get
• firebasedataconnect.connectors.impersonateMutation
• firebasedataconnect.connectors.impersonateQuery
• firebasedataconnect.connectors.list
• firebasedataconnect.connectors.update
• firebasedataconnect.locations.get
• firebasedataconnect.locations.list
• firebasedataconnect.operations.cancel
• firebasedataconnect.operations.delete
• firebasedataconnect.operations.get
• firebasedataconnect.operations.list
• firebasedataconnect.schemaRevisions.delete
• firebasedataconnect.schemaRevisions.get
• firebasedataconnect.schemaRevisions.list
• firebasedataconnect.schemas.create
• firebasedataconnect.schemas.delete
• firebasedataconnect.schemas.get
• firebasedataconnect.schemas.list
• firebasedataconnect.schemas.update
• firebasedataconnect.services.create
• firebasedataconnect.services.delete
• firebasedataconnect.services.executeGraphql
• firebasedataconnect.services.executeGraphqlRead
• firebasedataconnect.services.get
• firebasedataconnect.services.introspectGraphql
• firebasedataconnect.services.list
• firebasedataconnect.services.update

firebasedynamiclinks.*

• firebasedynamiclinks.destinations.list
• firebasedynamiclinks.destinations.update
• firebasedynamiclinks.domains.create
• firebasedynamiclinks.domains.delete
• firebasedynamiclinks.domains.get
• firebasedynamiclinks.domains.list
• firebasedynamiclinks.domains.update
• firebasedynamiclinks.links.create
• firebasedynamiclinks.links.get
• firebasedynamiclinks.links.list
• firebasedynamiclinks.links.update
• firebasedynamiclinks.stats.get

firebaseextensions.*

• firebaseextensions.configs.create
• firebaseextensions.configs.delete
• firebaseextensions.configs.list
• firebaseextensions.configs.update

firebaseextensionspublisher.*

• firebaseextensionspublisher.extensions.create
• firebaseextensionspublisher.extensions.delete
• firebaseextensionspublisher.extensions.get
• firebaseextensionspublisher.extensions.list

firebasehosting.*

• firebasehosting.sites.create
• firebasehosting.sites.delete
• firebasehosting.sites.get
• firebasehosting.sites.list
• firebasehosting.sites.update

firebaseinappmessaging.*

• firebaseinappmessaging.campaigns.create
• firebaseinappmessaging.campaigns.delete
• firebaseinappmessaging.campaigns.get
• firebaseinappmessaging.campaigns.list
• firebaseinappmessaging.campaigns.update

firebasemessagingcampaigns.*

• firebasemessagingcampaigns.campaigns.create
• firebasemessagingcampaigns.campaigns.delete
• firebasemessagingcampaigns.campaigns.get
• firebasemessagingcampaigns.campaigns.list
• firebasemessagingcampaigns.campaigns.start
• firebasemessagingcampaigns.campaigns.stop
• firebasemessagingcampaigns.campaigns.update

firebaseml.*

• firebaseml.models.create
• firebaseml.models.delete
• firebaseml.models.get
• firebaseml.models.list
• firebaseml.models.update
• firebaseml.modelversions.create
• firebaseml.modelversions.get
• firebaseml.modelversions.list
• firebaseml.modelversions.update

firebasenotifications.*

• firebasenotifications.messages.create
• firebasenotifications.messages.delete
• firebasenotifications.messages.get
• firebasenotifications.messages.list
• firebasenotifications.messages.update

firebaseperformance.*

• firebaseperformance.config.update
• firebaseperformance.data.get

firebaserules.*

• firebaserules.releases.create
• firebaserules.releases.delete
• firebaserules.releases.get
• firebaserules.releases.getExecutable
• firebaserules.releases.list
• firebaserules.releases.update
• firebaserules.rulesets.create
• firebaserules.rulesets.delete
• firebaserules.rulesets.get
• firebaserules.rulesets.list
• firebaserules.rulesets.test

firebasestorage.*

• firebasestorage.buckets.addFirebase
• firebasestorage.buckets.get
• firebasestorage.buckets.list
• firebasestorage.buckets.removeFirebase
• firebasestorage.defaultBucket.create
• firebasestorage.defaultBucket.delete
• firebasestorage.defaultBucket.get

firebasevertexai.*

• firebasevertexai.configs.get
• firebasevertexai.configs.update
• firebasevertexai.promptTemplates.create
• firebasevertexai.promptTemplates.delete
• firebasevertexai.promptTemplates.get
• firebasevertexai.promptTemplates.list
• firebasevertexai.promptTemplates.update

logging.logEntries.list

monitoring.timeSeries.*

• monitoring.timeSeries.create
• monitoring.timeSeries.list

oauthconfig.verification.get

orgpolicy.policy.get

recommender.cloudFunctionsPerformanceInsights.*

• recommender.cloudFunctionsPerformanceInsights.get
• recommender.cloudFunctionsPerformanceInsights.list
• recommender.cloudFunctionsPerformanceInsights.update

recommender.cloudFunctionsPerformanceRecommendations.*

• recommender.cloudFunctionsPerformanceRecommendations.get
• recommender.cloudFunctionsPerformanceRecommendations.list
• recommender.cloudFunctionsPerformanceRecommendations.update

recommender.iamPolicyInsights.*

• recommender.iamPolicyInsights.get
• recommender.iamPolicyInsights.list
• recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

• recommender.iamPolicyRecommendations.get
• recommender.iamPolicyRecommendations.list
• recommender.iamPolicyRecommendations.update

recommender.locations.*

• recommender.locations.get
• recommender.locations.list

recommender.runServiceCostInsights.*

• recommender.runServiceCostInsights.get
• recommender.runServiceCostInsights.list
• recommender.runServiceCostInsights.update

recommender.runServiceCostRecommendations.*

• recommender.runServiceCostRecommendations.get
• recommender.runServiceCostRecommendations.list
• recommender.runServiceCostRecommendations.update

recommender.runServiceIdentityInsights.*

• recommender.runServiceIdentityInsights.get
• recommender.runServiceIdentityInsights.list
• recommender.runServiceIdentityInsights.update

recommender.runServiceIdentityRecommendations.*

• recommender.runServiceIdentityRecommendations.get
• recommender.runServiceIdentityRecommendations.list
• recommender.runServiceIdentityRecommendations.update

recommender.runServicePerformanceInsights.*

• recommender.runServicePerformanceInsights.get
• recommender.runServicePerformanceInsights.list
• recommender.runServicePerformanceInsights.update

recommender.runServicePerformanceRecommendations.*

• recommender.runServicePerformanceRecommendations.get
• recommender.runServicePerformanceRecommendations.list
• recommender.runServicePerformanceRecommendations.update

recommender.runServiceSecurityInsights.*

• recommender.runServiceSecurityInsights.get
• recommender.runServiceSecurityInsights.list
• recommender.runServiceSecurityInsights.update

recommender.runServiceSecurityRecommendations.*

• recommender.runServiceSecurityRecommendations.get
• recommender.runServiceSecurityRecommendations.list
• recommender.runServiceSecurityRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

• recommender.storageBucketSoftDeleteInsights.get
• recommender.storageBucketSoftDeleteInsights.list
• recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

• recommender.storageBucketSoftDeleteRecommendations.get
• recommender.storageBucketSoftDeleteRecommendations.list
• recommender.storageBucketSoftDeleteRecommendations.update

remotebuildexecution.blobs.get

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.*

• run.configurations.get
• run.configurations.list
• run.executions.cancel
• run.executions.delete
• run.executions.get
• run.executions.list
• run.jobs.create
• run.jobs.createTagBinding
• run.jobs.delete
• run.jobs.deleteTagBinding
• run.jobs.get
• run.jobs.getIamPolicy
• run.jobs.list
• run.jobs.listEffectiveTags
• run.jobs.listTagBindings
• run.jobs.run
• run.jobs.runWithOverrides
• run.jobs.setIamPolicy
• run.jobs.update
• run.locations.list
• run.operations.delete
• run.operations.get
• run.operations.list
• run.revisions.delete
• run.revisions.get
• run.revisions.list
• run.routes.get
• run.routes.invoke
• run.routes.list
• run.services.create
• run.services.createTagBinding
• run.services.delete
• run.services.deleteTagBinding
• run.services.get
• run.services.getIamPolicy
• run.services.list
• run.services.listEffectiveTags
• run.services.listTagBindings
• run.services.setIamPolicy
• run.services.update
• run.tasks.get
• run.tasks.list
• run.workerpools.create
• run.workerpools.delete
• run.workerpools.get
• run.workerpools.getIamPolicy
• run.workerpools.list
• run.workerpools.setIamPolicy
• run.workerpools.update

runtimeconfig.configs.create

runtimeconfig.configs.delete

runtimeconfig.configs.get

runtimeconfig.configs.list

runtimeconfig.configs.update

runtimeconfig.operations.*

• runtimeconfig.operations.get
• runtimeconfig.operations.list

runtimeconfig.variables.create

runtimeconfig.variables.delete

runtimeconfig.variables.get

runtimeconfig.variables.list

runtimeconfig.variables.update

runtimeconfig.variables.watch

runtimeconfig.waiters.create

runtimeconfig.waiters.delete

runtimeconfig.waiters.get

runtimeconfig.waiters.list

runtimeconfig.waiters.update

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.anywhereCaches.*

• storage.anywhereCaches.create
• storage.anywhereCaches.disable
• storage.anywhereCaches.get
• storage.anywhereCaches.list
• storage.anywhereCaches.pause
• storage.anywhereCaches.resume
• storage.anywhereCaches.update

storage.bucketOperations.*

• storage.bucketOperations.cancel
• storage.bucketOperations.get
• storage.bucketOperations.list

storage.buckets.*

• storage.buckets.create
• storage.buckets.createTagBinding
• storage.buckets.delete
• storage.buckets.deleteTagBinding
• storage.buckets.enableObjectRetention
• storage.buckets.get
• storage.buckets.getIamPolicy
• storage.buckets.getIpFilter
• storage.buckets.getObjectInsights
• storage.buckets.list
• storage.buckets.listEffectiveTags
• storage.buckets.listTagBindings
• storage.buckets.relocate
• storage.buckets.restore
• storage.buckets.setIamPolicy
• storage.buckets.setIpFilter
• storage.buckets.update
• storage.buckets.viewIntelligenceDetails

storage.folders.*

• storage.folders.create
• storage.folders.delete
• storage.folders.get
• storage.folders.list
• storage.folders.rename

storage.intelligenceConfigs.*

• storage.intelligenceConfigs.get
• storage.intelligenceConfigs.update

storage.managedFolders.*

• storage.managedFolders.create
• storage.managedFolders.delete
• storage.managedFolders.get
• storage.managedFolders.getIamPolicy
• storage.managedFolders.list
• storage.managedFolders.setIamPolicy

storage.multipartUploads.*

• storage.multipartUploads.abort
• storage.multipartUploads.create
• storage.multipartUploads.list
• storage.multipartUploads.listParts

storage.objects.*

• storage.objects.create
• storage.objects.createContext
• storage.objects.delete
• storage.objects.deleteContext
• storage.objects.get
• storage.objects.getIamPolicy
• storage.objects.list
• storage.objects.move
• storage.objects.overrideUnlockedRetention
• storage.objects.restore
• storage.objects.setIamPolicy
• storage.objects.setRetention
• storage.objects.update
• storage.objects.updateContext

storagebatchoperations.*

• storagebatchoperations.bucketOperations.get
• storagebatchoperations.bucketOperations.list
• storagebatchoperations.jobs.cancel
• storagebatchoperations.jobs.create
• storagebatchoperations.jobs.delete
• storagebatchoperations.jobs.get
• storagebatchoperations.jobs.list
• storagebatchoperations.locations.get
• storagebatchoperations.locations.list
• storagebatchoperations.operations.cancel
• storagebatchoperations.operations.delete
• storagebatchoperations.operations.get
• storagebatchoperations.operations.list

Firebase Analytics Admin

(roles/firebase.analyticsAdmin)

Full access to Google Analytics for Firebase.

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

• firebaseanalytics.resources.googleAnalyticsEdit
• firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseextensions.configs.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

Firebase Analytics Viewer

(roles/firebase.analyticsViewer)

Read access to Google Analytics for Firebase.

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseextensions.configs.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

Firebase App Distribution Admin SDK Service Agent

(roles/firebase.appDistributionSdkServiceAgent)

Read and write access to Firebase App Distribution with the Admin SDK

firebaseappdistro.*

• firebaseappdistro.groups.list
• firebaseappdistro.groups.update
• firebaseappdistro.releases.list
• firebaseappdistro.releases.update
• firebaseappdistro.testers.list
• firebaseappdistro.testers.update

Firebase Develop Admin

(roles/firebase.developAdmin)

Full access to Firebase Develop products and Analytics.

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.lookup

appengine.applications.get

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

• artifactregistry.dockerimages.get
• artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

• artifactregistry.locations.get
• artifactregistry.locations.list

artifactregistry.mavenartifacts.*

• artifactregistry.mavenartifacts.get
• artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

• artifactregistry.npmpackages.get
• artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

• artifactregistry.pythonpackages.get
• artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

automl.*

• automl.annotationSpecs.create
• automl.annotationSpecs.delete
• automl.annotationSpecs.get
• automl.annotationSpecs.list
• automl.annotationSpecs.update
• automl.annotations.approve
• automl.annotations.create
• automl.annotations.list
• automl.annotations.manipulate
• automl.annotations.reject
• automl.columnSpecs.get
• automl.columnSpecs.list
• automl.columnSpecs.update
• automl.datasets.create
• automl.datasets.delete
• automl.datasets.export
• automl.datasets.get
• automl.datasets.getIamPolicy
• automl.datasets.import
• automl.datasets.list
• automl.datasets.setIamPolicy
• automl.datasets.update
• automl.examples.delete
• automl.examples.get
• automl.examples.list
• automl.examples.update
• automl.files.delete
• automl.files.list
• automl.humanAnnotationTasks.create
• automl.humanAnnotationTasks.delete
• automl.humanAnnotationTasks.get
• automl.humanAnnotationTasks.list
• automl.locations.get
• automl.locations.getIamPolicy
• automl.locations.list
• automl.locations.setIamPolicy
• automl.modelEvaluations.create
• automl.modelEvaluations.get
• automl.modelEvaluations.list
• automl.models.create
• automl.models.delete
• automl.models.deploy
• automl.models.export
• automl.models.get
• automl.models.getIamPolicy
• automl.models.list
• automl.models.predict
• automl.models.setIamPolicy
• automl.models.undeploy
• automl.operations.cancel
• automl.operations.delete
• automl.operations.get
• automl.operations.list
• automl.tableSpecs.get
• automl.tableSpecs.list
• automl.tableSpecs.update

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.get

clientauthconfig.clients.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

• cloudbuild.locations.get
• cloudbuild.locations.list

cloudbuild.operations.*

• cloudbuild.operations.get
• cloudbuild.operations.list

cloudfunctions.*

• cloudfunctions.functions.call
• cloudfunctions.functions.create
• cloudfunctions.functions.delete
• cloudfunctions.functions.generationUpgrade
• cloudfunctions.functions.get
• cloudfunctions.functions.getIamPolicy
• cloudfunctions.functions.invoke
• cloudfunctions.functions.list
• cloudfunctions.functions.setIamPolicy
• cloudfunctions.functions.sourceCodeGet
• cloudfunctions.functions.sourceCodeSet
• cloudfunctions.functions.update
• cloudfunctions.locations.list
• cloudfunctions.operations.get
• cloudfunctions.operations.list

cloudkms.keyHandles.*

• cloudkms.keyHandles.create
• cloudkms.keyHandles.get
• cloudkms.keyHandles.list

cloudkms.operations.get

cloudkms.projects.showEffectiveAutokeyConfig

cloudnotifications.activities.list

databasesconsole.locations.*

• databasesconsole.locations.get
• databasesconsole.locations.list

databasesconsole.studioQueries.*

• databasesconsole.studioQueries.create
• databasesconsole.studioQueries.delete
• databasesconsole.studioQueries.get
• databasesconsole.studioQueries.list
• databasesconsole.studioQueries.search
• databasesconsole.studioQueries.update

datastore.*

• datastore.backupSchedules.create
• datastore.backupSchedules.delete
• datastore.backupSchedules.get
• datastore.backupSchedules.list
• datastore.backupSchedules.update
• datastore.backups.delete
• datastore.backups.get
• datastore.backups.list
• datastore.backups.restoreDatabase
• datastore.databases.bulkDelete
• datastore.databases.clone
• datastore.databases.create
• datastore.databases.createTagBinding
• datastore.databases.delete
• datastore.databases.deleteTagBinding
• datastore.databases.export
• datastore.databases.get
• datastore.databases.getMetadata
• datastore.databases.import
• datastore.databases.list
• datastore.databases.listEffectiveTags
• datastore.databases.listTagBindings
• datastore.databases.update
• datastore.entities.allocateIds
• datastore.entities.create
• datastore.entities.delete
• datastore.entities.get
• datastore.entities.list
• datastore.entities.update
• datastore.indexes.create
• datastore.indexes.delete
• datastore.indexes.get
• datastore.indexes.list
• datastore.indexes.update
• datastore.insights.get
• datastore.keyVisualizerScans.get
• datastore.keyVisualizerScans.list
• datastore.locations.get
• datastore.locations.list
• datastore.namespaces.get
• datastore.namespaces.list
• datastore.operations.cancel
• datastore.operations.delete
• datastore.operations.get
• datastore.operations.list
• datastore.statistics.get
• datastore.statistics.list
• datastore.userCreds.create
• datastore.userCreds.delete
• datastore.userCreds.get
• datastore.userCreds.list
• datastore.userCreds.update

errorreporting.groups.list

eventarc.*

• eventarc.channelConnections.create
• eventarc.channelConnections.delete
• eventarc.channelConnections.get
• eventarc.channelConnections.getIamPolicy
• eventarc.channelConnections.list
• eventarc.channelConnections.publish
• eventarc.channelConnections.setIamPolicy
• eventarc.channels.attach
• eventarc.channels.create
• eventarc.channels.delete
• eventarc.channels.get
• eventarc.channels.getIamPolicy
• eventarc.channels.list
• eventarc.channels.publish
• eventarc.channels.setIamPolicy
• eventarc.channels.undelete
• eventarc.channels.update
• eventarc.enrollments.create
• eventarc.enrollments.delete
• eventarc.enrollments.get
• eventarc.enrollments.getIamPolicy
• eventarc.enrollments.list
• eventarc.enrollments.setIamPolicy
• eventarc.enrollments.update
• eventarc.events.receiveAuditLogWritten
• eventarc.events.receiveEvent
• eventarc.googleApiSources.create
• eventarc.googleApiSources.delete
• eventarc.googleApiSources.get
• eventarc.googleApiSources.getIamPolicy
• eventarc.googleApiSources.list
• eventarc.googleApiSources.setIamPolicy
• eventarc.googleApiSources.update
• eventarc.googleChannelConfigs.get
• eventarc.googleChannelConfigs.update
• eventarc.kafkaSources.create
• eventarc.kafkaSources.delete
• eventarc.kafkaSources.get
• eventarc.kafkaSources.getIamPolicy
• eventarc.kafkaSources.list
• eventarc.kafkaSources.setIamPolicy
• eventarc.locations.get
• eventarc.locations.list
• eventarc.messageBuses.create
• eventarc.messageBuses.delete
• eventarc.messageBuses.get
• eventarc.messageBuses.getIamPolicy
• eventarc.messageBuses.list
• eventarc.messageBuses.publish
• eventarc.messageBuses.setIamPolicy
• eventarc.messageBuses.update
• eventarc.messageBuses.use
• eventarc.multiProjectSources.collectGoogleApiEvents
• eventarc.operations.cancel
• eventarc.operations.delete
• eventarc.operations.get
• eventarc.operations.list
• eventarc.pipelines.create
• eventarc.pipelines.delete
• eventarc.pipelines.get
• eventarc.pipelines.getIamPolicy
• eventarc.pipelines.list
• eventarc.pipelines.setIamPolicy
• eventarc.pipelines.update
• eventarc.providers.get
• eventarc.providers.list
• eventarc.triggers.create
• eventarc.triggers.delete
• eventarc.triggers.get
• eventarc.triggers.getIamPolicy
• eventarc.triggers.list
• eventarc.triggers.setIamPolicy
• eventarc.triggers.undelete
• eventarc.triggers.update

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

• firebaseanalytics.resources.googleAnalyticsEdit
• firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.*

• firebaseappcheck.appAttestConfig.get
• firebaseappcheck.appAttestConfig.update
• firebaseappcheck.appCheckTokens.verify
• firebaseappcheck.automations.create
• firebaseappcheck.automations.delete
• firebaseappcheck.automations.get
• firebaseappcheck.automations.list
• firebaseappcheck.automations.resume
• firebaseappcheck.automations.suspend
• firebaseappcheck.automations.update
• firebaseappcheck.debugTokens.get
• firebaseappcheck.debugTokens.update
• firebaseappcheck.deviceCheckConfig.get
• firebaseappcheck.deviceCheckConfig.update
• firebaseappcheck.playIntegrityConfig.get
• firebaseappcheck.playIntegrityConfig.update
• firebaseappcheck.recaptchaEnterpriseConfig.get
• firebaseappcheck.recaptchaEnterpriseConfig.update
• firebaseappcheck.recaptchaV3Config.get
• firebaseappcheck.recaptchaV3Config.update
• firebaseappcheck.resourcePolicies.get
• firebaseappcheck.resourcePolicies.update
• firebaseappcheck.safetyNetConfig.get
• firebaseappcheck.safetyNetConfig.update
• firebaseappcheck.services.get
• firebaseappcheck.services.update

firebaseapphosting.*

• firebaseapphosting.backends.create
• firebaseapphosting.backends.delete
• firebaseapphosting.backends.get
• firebaseapphosting.backends.list
• firebaseapphosting.backends.update
• firebaseapphosting.builds.create
• firebaseapphosting.builds.delete
• firebaseapphosting.builds.get
• firebaseapphosting.builds.list
• firebaseapphosting.builds.update
• firebaseapphosting.domains.create
• firebaseapphosting.domains.delete
• firebaseapphosting.domains.get
• firebaseapphosting.domains.list
• firebaseapphosting.domains.update
• firebaseapphosting.locations.get
• firebaseapphosting.locations.list
• firebaseapphosting.operations.cancel
• firebaseapphosting.operations.delete
• firebaseapphosting.operations.get
• firebaseapphosting.operations.list
• firebaseapphosting.rollouts.create
• firebaseapphosting.rollouts.delete
• firebaseapphosting.rollouts.get
• firebaseapphosting.rollouts.list
• firebaseapphosting.rollouts.update
• firebaseapphosting.traffic.get
• firebaseapphosting.traffic.update

firebaseauth.*

• firebaseauth.configs.create
• firebaseauth.configs.get
• firebaseauth.configs.getHashConfig
• firebaseauth.configs.getSecret
• firebaseauth.configs.update
• firebaseauth.users.create
• firebaseauth.users.createSession
• firebaseauth.users.delete
• firebaseauth.users.get
• firebaseauth.users.sendEmail
• firebaseauth.users.update

firebasedatabase.*

• firebasedatabase.instances.create
• firebasedatabase.instances.delete
• firebasedatabase.instances.disable
• firebasedatabase.instances.get
• firebasedatabase.instances.list
• firebasedatabase.instances.reenable
• firebasedatabase.instances.undelete
• firebasedatabase.instances.update

firebasedataconnect.*

• firebasedataconnect.connectorRevisions.delete
• firebasedataconnect.connectorRevisions.get
• firebasedataconnect.connectorRevisions.list
• firebasedataconnect.connectors.create
• firebasedataconnect.connectors.delete
• firebasedataconnect.connectors.get
• firebasedataconnect.connectors.impersonateMutation
• firebasedataconnect.connectors.impersonateQuery
• firebasedataconnect.connectors.list
• firebasedataconnect.connectors.update
• firebasedataconnect.locations.get
• firebasedataconnect.locations.list
• firebasedataconnect.operations.cancel
• firebasedataconnect.operations.delete
• firebasedataconnect.operations.get
• firebasedataconnect.operations.list
• firebasedataconnect.schemaRevisions.delete
• firebasedataconnect.schemaRevisions.get
• firebasedataconnect.schemaRevisions.list
• firebasedataconnect.schemas.create
• firebasedataconnect.schemas.delete
• firebasedataconnect.schemas.get
• firebasedataconnect.schemas.list
• firebasedataconnect.schemas.update
• firebasedataconnect.services.create
• firebasedataconnect.services.delete
• firebasedataconnect.services.executeGraphql
• firebasedataconnect.services.executeGraphqlRead
• firebasedataconnect.services.get
• firebasedataconnect.services.introspectGraphql
• firebasedataconnect.services.list
• firebasedataconnect.services.update

firebaseextensions.configs.list

firebasehosting.*

• firebasehosting.sites.create
• firebasehosting.sites.delete
• firebasehosting.sites.get
• firebasehosting.sites.list
• firebasehosting.sites.update

firebaseml.*

• firebaseml.models.create
• firebaseml.models.delete
• firebaseml.models.get
• firebaseml.models.list
• firebaseml.models.update
• firebaseml.modelversions.create
• firebaseml.modelversions.get
• firebaseml.modelversions.list
• firebaseml.modelversions.update

firebaserules.*

• firebaserules.releases.create
• firebaserules.releases.delete
• firebaserules.releases.get
• firebaserules.releases.getExecutable
• firebaserules.releases.list
• firebaserules.releases.update
• firebaserules.rulesets.create
• firebaserules.rulesets.delete
• firebaserules.rulesets.get
• firebaserules.rulesets.list
• firebaserules.rulesets.test

firebasestorage.*

• firebasestorage.buckets.addFirebase
• firebasestorage.buckets.get
• firebasestorage.buckets.list
• firebasestorage.buckets.removeFirebase
• firebasestorage.defaultBucket.create
• firebasestorage.defaultBucket.delete
• firebasestorage.defaultBucket.get

firebasevertexai.*

• firebasevertexai.configs.get
• firebasevertexai.configs.update
• firebasevertexai.promptTemplates.create
• firebasevertexai.promptTemplates.delete
• firebasevertexai.promptTemplates.get
• firebasevertexai.promptTemplates.list
• firebasevertexai.promptTemplates.update

logging.logEntries.list

monitoring.timeSeries.*

• monitoring.timeSeries.create
• monitoring.timeSeries.list

oauthconfig.verification.get

orgpolicy.policy.get

recommender.cloudFunctionsPerformanceInsights.*

• recommender.cloudFunctionsPerformanceInsights.get
• recommender.cloudFunctionsPerformanceInsights.list
• recommender.cloudFunctionsPerformanceInsights.update

recommender.cloudFunctionsPerformanceRecommendations.*

• recommender.cloudFunctionsPerformanceRecommendations.get
• recommender.cloudFunctionsPerformanceRecommendations.list
• recommender.cloudFunctionsPerformanceRecommendations.update

recommender.iamPolicyInsights.*

• recommender.iamPolicyInsights.get
• recommender.iamPolicyInsights.list
• recommender.iamPolicyInsights.update

recommender.iamPolicyRecommendations.*

• recommender.iamPolicyRecommendations.get
• recommender.iamPolicyRecommendations.list
• recommender.iamPolicyRecommendations.update

recommender.locations.*

• recommender.locations.get
• recommender.locations.list

recommender.runServiceCostInsights.*

• recommender.runServiceCostInsights.get
• recommender.runServiceCostInsights.list
• recommender.runServiceCostInsights.update

recommender.runServiceCostRecommendations.*

• recommender.runServiceCostRecommendations.get
• recommender.runServiceCostRecommendations.list
• recommender.runServiceCostRecommendations.update

recommender.runServiceIdentityInsights.*

• recommender.runServiceIdentityInsights.get
• recommender.runServiceIdentityInsights.list
• recommender.runServiceIdentityInsights.update

recommender.runServiceIdentityRecommendations.*

• recommender.runServiceIdentityRecommendations.get
• recommender.runServiceIdentityRecommendations.list
• recommender.runServiceIdentityRecommendations.update

recommender.runServicePerformanceInsights.*

• recommender.runServicePerformanceInsights.get
• recommender.runServicePerformanceInsights.list
• recommender.runServicePerformanceInsights.update

recommender.runServicePerformanceRecommendations.*

• recommender.runServicePerformanceRecommendations.get
• recommender.runServicePerformanceRecommendations.list
• recommender.runServicePerformanceRecommendations.update

recommender.runServiceSecurityInsights.*

• recommender.runServiceSecurityInsights.get
• recommender.runServiceSecurityInsights.list
• recommender.runServiceSecurityInsights.update

recommender.runServiceSecurityRecommendations.*

• recommender.runServiceSecurityRecommendations.get
• recommender.runServiceSecurityRecommendations.list
• recommender.runServiceSecurityRecommendations.update

recommender.storageBucketSoftDeleteInsights.*

• recommender.storageBucketSoftDeleteInsights.get
• recommender.storageBucketSoftDeleteInsights.list
• recommender.storageBucketSoftDeleteInsights.update

recommender.storageBucketSoftDeleteRecommendations.*

• recommender.storageBucketSoftDeleteRecommendations.get
• recommender.storageBucketSoftDeleteRecommendations.list
• recommender.storageBucketSoftDeleteRecommendations.update

remotebuildexecution.blobs.get

resourcemanager.hierarchyNodes.listEffectiveTags

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.*

• run.configurations.get
• run.configurations.list
• run.executions.cancel
• run.executions.delete
• run.executions.get
• run.executions.list
• run.jobs.create
• run.jobs.createTagBinding
• run.jobs.delete
• run.jobs.deleteTagBinding
• run.jobs.get
• run.jobs.getIamPolicy
• run.jobs.list
• run.jobs.listEffectiveTags
• run.jobs.listTagBindings
• run.jobs.run
• run.jobs.runWithOverrides
• run.jobs.setIamPolicy
• run.jobs.update
• run.locations.list
• run.operations.delete
• run.operations.get
• run.operations.list
• run.revisions.delete
• run.revisions.get
• run.revisions.list
• run.routes.get
• run.routes.invoke
• run.routes.list
• run.services.create
• run.services.createTagBinding
• run.services.delete
• run.services.deleteTagBinding
• run.services.get
• run.services.getIamPolicy
• run.services.list
• run.services.listEffectiveTags
• run.services.listTagBindings
• run.services.setIamPolicy
• run.services.update
• run.tasks.get
• run.tasks.list
• run.workerpools.create
• run.workerpools.delete
• run.workerpools.get
• run.workerpools.getIamPolicy
• run.workerpools.list
• run.workerpools.setIamPolicy
• run.workerpools.update

runtimeconfig.configs.create

runtimeconfig.configs.delete

runtimeconfig.configs.get

runtimeconfig.configs.list

runtimeconfig.configs.update

runtimeconfig.operations.*

• runtimeconfig.operations.get
• runtimeconfig.operations.list

runtimeconfig.variables.create

runtimeconfig.variables.delete

runtimeconfig.variables.get

runtimeconfig.variables.list

runtimeconfig.variables.update

runtimeconfig.variables.watch

runtimeconfig.waiters.create

runtimeconfig.waiters.delete

runtimeconfig.waiters.get

runtimeconfig.waiters.list

runtimeconfig.waiters.update

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.anywhereCaches.*

• storage.anywhereCaches.create
• storage.anywhereCaches.disable
• storage.anywhereCaches.get
• storage.anywhereCaches.list
• storage.anywhereCaches.pause
• storage.anywhereCaches.resume
• storage.anywhereCaches.update

storage.bucketOperations.*

• storage.bucketOperations.cancel
• storage.bucketOperations.get
• storage.bucketOperations.list

storage.buckets.*

• storage.buckets.create
• storage.buckets.createTagBinding
• storage.buckets.delete
• storage.buckets.deleteTagBinding
• storage.buckets.enableObjectRetention
• storage.buckets.get
• storage.buckets.getIamPolicy
• storage.buckets.getIpFilter
• storage.buckets.getObjectInsights
• storage.buckets.list
• storage.buckets.listEffectiveTags
• storage.buckets.listTagBindings
• storage.buckets.relocate
• storage.buckets.restore
• storage.buckets.setIamPolicy
• storage.buckets.setIpFilter
• storage.buckets.update
• storage.buckets.viewIntelligenceDetails

storage.folders.*

• storage.folders.create
• storage.folders.delete
• storage.folders.get
• storage.folders.list
• storage.folders.rename

storage.intelligenceConfigs.*

• storage.intelligenceConfigs.get
• storage.intelligenceConfigs.update

storage.managedFolders.*

• storage.managedFolders.create
• storage.managedFolders.delete
• storage.managedFolders.get
• storage.managedFolders.getIamPolicy
• storage.managedFolders.list
• storage.managedFolders.setIamPolicy

storage.multipartUploads.*

• storage.multipartUploads.abort
• storage.multipartUploads.create
• storage.multipartUploads.list
• storage.multipartUploads.listParts

storage.objects.*

• storage.objects.create
• storage.objects.createContext
• storage.objects.delete
• storage.objects.deleteContext
• storage.objects.get
• storage.objects.getIamPolicy
• storage.objects.list
• storage.objects.move
• storage.objects.overrideUnlockedRetention
• storage.objects.restore
• storage.objects.setIamPolicy
• storage.objects.setRetention
• storage.objects.update
• storage.objects.updateContext

storagebatchoperations.*

• storagebatchoperations.bucketOperations.get
• storagebatchoperations.bucketOperations.list
• storagebatchoperations.jobs.cancel
• storagebatchoperations.jobs.create
• storagebatchoperations.jobs.delete
• storagebatchoperations.jobs.get
• storagebatchoperations.jobs.list
• storagebatchoperations.locations.get
• storagebatchoperations.locations.list
• storagebatchoperations.operations.cancel
• storagebatchoperations.operations.delete
• storagebatchoperations.operations.get
• storagebatchoperations.operations.list

Firebase Develop Viewer

(roles/firebase.developViewer)

Read access to Firebase Develop products and Analytics.

apikeys.keys.get

apikeys.keys.list

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

clientauthconfig.brands.get

clientauthconfig.brands.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

• cloudbuild.locations.get
• cloudbuild.locations.list

cloudbuild.operations.*

• cloudbuild.operations.get
• cloudbuild.operations.list

cloudfunctions.functions.get

cloudfunctions.functions.getIamPolicy

cloudfunctions.functions.list

cloudfunctions.locations.list

cloudfunctions.operations.*

• cloudfunctions.operations.get
• cloudfunctions.operations.list

cloudnotifications.activities.list

datastore.backups.get

datastore.backups.list

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.get

datastore.entities.list

datastore.indexes.get

datastore.indexes.list

datastore.namespaces.*

• datastore.namespaces.get
• datastore.namespaces.list

datastore.statistics.*

• datastore.statistics.get
• datastore.statistics.list

errorreporting.groups.list

eventarc.channelConnections.get

eventarc.channelConnections.getIamPolicy

eventarc.channelConnections.list

eventarc.channels.get

eventarc.channels.getIamPolicy

eventarc.channels.list

eventarc.enrollments.get

eventarc.enrollments.getIamPolicy

eventarc.enrollments.list

eventarc.googleApiSources.get

eventarc.googleApiSources.getIamPolicy

eventarc.googleApiSources.list

eventarc.googleChannelConfigs.get

eventarc.kafkaSources.get

eventarc.kafkaSources.getIamPolicy

eventarc.kafkaSources.list

eventarc.locations.*

• eventarc.locations.get
• eventarc.locations.list

eventarc.messageBuses.get

eventarc.messageBuses.getIamPolicy

eventarc.messageBuses.list

eventarc.messageBuses.use

eventarc.multiProjectSources.collectGoogleApiEvents

eventarc.operations.get

eventarc.operations.list

eventarc.pipelines.get

eventarc.pipelines.getIamPolicy

eventarc.pipelines.list

eventarc.providers.*

• eventarc.providers.get
• eventarc.providers.list

eventarc.triggers.get

eventarc.triggers.getIamPolicy

eventarc.triggers.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.appAttestConfig.get

firebaseappcheck.automations.get

firebaseappcheck.automations.list

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

• firebaseapphosting.locations.get
• firebaseapphosting.locations.list

firebaseapphosting.operations.get

firebaseapphosting.operations.list

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.traffic.get

firebaseauth.configs.get

firebaseauth.users.get

firebasedatabase.instances.get

firebasedatabase.instances.list

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

• firebasedataconnect.locations.get
• firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.introspectGraphql

firebasedataconnect.services.list

firebaseextensions.configs.list

firebasehosting.sites.get

firebasehosting.sites.list

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

firebaserules.releases.get

firebaserules.releases.list

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

firebasevertexai.configs.get

firebasevertexai.promptTemplates.get

firebasevertexai.promptTemplates.list

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.locations.*

• recommender.locations.get
• recommender.locations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

remotebuildexecution.blobs.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.configurations.*

• run.configurations.get
• run.configurations.list

run.executions.get

run.executions.list

run.jobs.get

run.jobs.getIamPolicy

run.jobs.list

run.jobs.listEffectiveTags

run.jobs.listTagBindings

run.locations.list

run.operations.get

run.operations.list

run.revisions.get

run.revisions.list

run.routes.get

run.routes.list

run.services.get

run.services.getIamPolicy

run.services.list

run.services.listEffectiveTags

run.services.listTagBindings

run.tasks.*

• run.tasks.get
• run.tasks.list

run.workerpools.get

run.workerpools.getIamPolicy

run.workerpools.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list

Firebase Grow Admin

(roles/firebase.growthAdmin)

Full access to Firebase Grow products and Analytics.

apikeys.keys.get

apikeys.keys.list

clientauthconfig.clients.get

clientauthconfig.clients.list

cloudconfig.*

• cloudconfig.configs.get
• cloudconfig.configs.update

cloudmessaging.messages.create

cloudnotifications.activities.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.*

• firebaseabt.experimentresults.get
• firebaseabt.experiments.create
• firebaseabt.experiments.delete
• firebaseabt.experiments.get
• firebaseabt.experiments.list
• firebaseabt.experiments.update
• firebaseabt.projectmetadata.get

firebaseanalytics.*

• firebaseanalytics.resources.googleAnalyticsEdit
• firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebasedynamiclinks.*

• firebasedynamiclinks.destinations.list
• firebasedynamiclinks.destinations.update
• firebasedynamiclinks.domains.create
• firebasedynamiclinks.domains.delete
• firebasedynamiclinks.domains.get
• firebasedynamiclinks.domains.list
• firebasedynamiclinks.domains.update
• firebasedynamiclinks.links.create
• firebasedynamiclinks.links.get
• firebasedynamiclinks.links.list
• firebasedynamiclinks.links.update
• firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseinappmessaging.*

• firebaseinappmessaging.campaigns.create
• firebaseinappmessaging.campaigns.delete
• firebaseinappmessaging.campaigns.get
• firebaseinappmessaging.campaigns.list
• firebaseinappmessaging.campaigns.update

firebasemessagingcampaigns.*

• firebasemessagingcampaigns.campaigns.create
• firebasemessagingcampaigns.campaigns.delete
• firebasemessagingcampaigns.campaigns.get
• firebasemessagingcampaigns.campaigns.list
• firebasemessagingcampaigns.campaigns.start
• firebasemessagingcampaigns.campaigns.stop
• firebasemessagingcampaigns.campaigns.update

firebasenotifications.*

• firebasenotifications.messages.create
• firebasenotifications.messages.delete
• firebasenotifications.messages.get
• firebasenotifications.messages.list
• firebasenotifications.messages.update

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Grow Viewer

(roles/firebase.growthViewer)

Read access to Firebase Grow products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudconfig.configs.get

cloudnotifications.activities.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.experimentresults.get

firebaseabt.experiments.get

firebaseabt.experiments.list

firebaseabt.projectmetadata.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebasedynamiclinks.destinations.list

firebasedynamiclinks.domains.get

firebasedynamiclinks.domains.list

firebasedynamiclinks.links.get

firebasedynamiclinks.links.list

firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseinappmessaging.campaigns.get

firebaseinappmessaging.campaigns.list

firebasemessagingcampaigns.campaigns.get

firebasemessagingcampaigns.campaigns.list

firebasenotifications.messages.get

firebasenotifications.messages.list

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Service Management Service Agent

(roles/firebase.managementServiceAgent)

Access to create new service agents for Firebase projects; assign roles to service agents; provision GCP resources as required by Firebase services.

apikeys.keys.create

apikeys.keys.get

apikeys.keys.getKeyString

apikeys.keys.list

apikeys.keys.update

appengine.applications.create

appengine.applications.get

appengine.applications.update

appengine.operations.get

appengine.services.list

bigquery.datasets.create

bigquery.datasets.get

bigquery.datasets.setIamPolicy

bigquery.datasets.update

bigquery.transfers.*

• bigquery.transfers.get
• bigquery.transfers.update

clientauthconfig.brands.create

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.brands.update

clientauthconfig.clients.create

clientauthconfig.clients.delete

clientauthconfig.clients.get

clientauthconfig.clients.getWithSecret

clientauthconfig.clients.list

clientauthconfig.clients.update

datastore.databases.create

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.databases.update

datastore.locations.*

• datastore.locations.get
• datastore.locations.list

datastore.operations.get

datastore.operations.list

firebase.clients.create

firebase.clients.delete

firebase.clients.get

firebase.clients.undelete

firebase.clients.update

firebase.projects.*

• firebase.projects.delete
• firebase.projects.get
• firebase.projects.update

firebaseabt.experiments.delete

firebaseapphosting.domains.create

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.domains.update

firebaseauth.configs.create

firebaseauth.configs.get

firebaseauth.configs.update

firebasedataconnect.locations.*

• firebasedataconnect.locations.get
• firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.services.create

firebasehosting.sites.create

firebasehosting.sites.get

firebasehosting.sites.list

firebasehosting.sites.update

firebaserules.releases.create

firebaserules.releases.delete

firebaserules.releases.get

firebaserules.releases.list

firebaserules.releases.update

firebaserules.rulesets.create

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.defaultBucket.get

firebasevertexai.configs.*

• firebasevertexai.configs.get
• firebasevertexai.configs.update

iam.roles.get

iam.serviceAccounts.create

iam.serviceAccounts.get

iam.serviceAccounts.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.setIamPolicy

resourcemanager.projects.update

servicemanagement.services.bind

serviceusage.consumerpolicy.*

• serviceusage.consumerpolicy.analyze
• serviceusage.consumerpolicy.get
• serviceusage.consumerpolicy.update

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

serviceusage.services.use

serviceusage.values.test

storage.bucketOperations.get

storage.bucketOperations.list

storage.buckets.create

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.buckets.setIamPolicy

storage.buckets.update

Firebase Quality Admin

(roles/firebase.qualityAdmin)

Full access to Firebase Quality products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.*

• firebaseanalytics.resources.googleAnalyticsEdit
• firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappdistro.*

• firebaseappdistro.groups.list
• firebaseappdistro.groups.update
• firebaseappdistro.releases.list
• firebaseappdistro.releases.update
• firebaseappdistro.testers.list
• firebaseappdistro.testers.update

firebasecrash.*

• firebasecrash.issues.update
• firebasecrash.reports.get

firebasecrashlytics.*

• firebasecrashlytics.config.get
• firebasecrashlytics.config.update
• firebasecrashlytics.data.get
• firebasecrashlytics.issues.get
• firebasecrashlytics.issues.list
• firebasecrashlytics.issues.update
• firebasecrashlytics.sessions.get

firebaseextensions.configs.list

firebaseperformance.*

• firebaseperformance.config.update
• firebaseperformance.data.get

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Quality Viewer

(roles/firebase.qualityViewer)

Read access to Firebase Quality products and Analytics.

apikeys.keys.get

apikeys.keys.list

cloudnotifications.activities.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappdistro.groups.list

firebaseappdistro.releases.list

firebaseappdistro.testers.list

firebasecrash.reports.get

firebasecrashlytics.config.get

firebasecrashlytics.data.get

firebasecrashlytics.issues.get

firebasecrashlytics.issues.list

firebasecrashlytics.sessions.get

firebaseextensions.configs.list

firebaseperformance.data.get

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Firebase Admin SDK Administrator Service Agent

(roles/firebase.sdkAdminServiceAgent)

Read and write access to Firebase products available in the Admin SDK

appengine.applications.get

cloudconfig.*

• cloudconfig.configs.get
• cloudconfig.configs.update

cloudmessaging.messages.create

databasesconsole.locations.*

• databasesconsole.locations.get
• databasesconsole.locations.list

databasesconsole.studioQueries.create

databasesconsole.studioQueries.delete

databasesconsole.studioQueries.search

databasesconsole.studioQueries.update

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.*

• datastore.entities.allocateIds
• datastore.entities.create
• datastore.entities.delete
• datastore.entities.get
• datastore.entities.list
• datastore.entities.update

datastore.indexes.get

datastore.indexes.list

datastore.insights.get

datastore.namespaces.*

• datastore.namespaces.get
• datastore.namespaces.list

datastore.statistics.*

• datastore.statistics.get
• datastore.statistics.list

firebase.clients.*

• firebase.clients.create
• firebase.clients.delete
• firebase.clients.get
• firebase.clients.list
• firebase.clients.undelete
• firebase.clients.update

firebase.projects.get

firebase.projects.update

firebaseappcheck.*

• firebaseappcheck.appAttestConfig.get
• firebaseappcheck.appAttestConfig.update
• firebaseappcheck.appCheckTokens.verify
• firebaseappcheck.automations.create
• firebaseappcheck.automations.delete
• firebaseappcheck.automations.get
• firebaseappcheck.automations.list
• firebaseappcheck.automations.resume
• firebaseappcheck.automations.suspend
• firebaseappcheck.automations.update
• firebaseappcheck.debugTokens.get
• firebaseappcheck.debugTokens.update
• firebaseappcheck.deviceCheckConfig.get
• firebaseappcheck.deviceCheckConfig.update
• firebaseappcheck.playIntegrityConfig.get
• firebaseappcheck.playIntegrityConfig.update
• firebaseappcheck.recaptchaEnterpriseConfig.get
• firebaseappcheck.recaptchaEnterpriseConfig.update
• firebaseappcheck.recaptchaV3Config.get
• firebaseappcheck.recaptchaV3Config.update
• firebaseappcheck.resourcePolicies.get
• firebaseappcheck.resourcePolicies.update
• firebaseappcheck.safetyNetConfig.get
• firebaseappcheck.safetyNetConfig.update
• firebaseappcheck.services.get
• firebaseappcheck.services.update

firebaseauth.configs.create

firebaseauth.configs.get

firebaseauth.configs.getSecret

firebaseauth.configs.update

firebaseauth.users.*

• firebaseauth.users.create
• firebaseauth.users.createSession
• firebaseauth.users.delete
• firebaseauth.users.get
• firebaseauth.users.sendEmail
• firebaseauth.users.update

firebasedatabase.*

• firebasedatabase.instances.create
• firebasedatabase.instances.delete
• firebasedatabase.instances.disable
• firebasedatabase.instances.get
• firebasedatabase.instances.list
• firebasedatabase.instances.reenable
• firebasedatabase.instances.undelete
• firebasedatabase.instances.update

firebasedataconnect.*

• firebasedataconnect.connectorRevisions.delete
• firebasedataconnect.connectorRevisions.get
• firebasedataconnect.connectorRevisions.list
• firebasedataconnect.connectors.create
• firebasedataconnect.connectors.delete
• firebasedataconnect.connectors.get
• firebasedataconnect.connectors.impersonateMutation
• firebasedataconnect.connectors.impersonateQuery
• firebasedataconnect.connectors.list
• firebasedataconnect.connectors.update
• firebasedataconnect.locations.get
• firebasedataconnect.locations.list
• firebasedataconnect.operations.cancel
• firebasedataconnect.operations.delete
• firebasedataconnect.operations.get
• firebasedataconnect.operations.list
• firebasedataconnect.schemaRevisions.delete
• firebasedataconnect.schemaRevisions.get
• firebasedataconnect.schemaRevisions.list
• firebasedataconnect.schemas.create
• firebasedataconnect.schemas.delete
• firebasedataconnect.schemas.get
• firebasedataconnect.schemas.list
• firebasedataconnect.schemas.update
• firebasedataconnect.services.create
• firebasedataconnect.services.delete
• firebasedataconnect.services.executeGraphql
• firebasedataconnect.services.executeGraphqlRead
• firebasedataconnect.services.get
• firebasedataconnect.services.introspectGraphql
• firebasedataconnect.services.list
• firebasedataconnect.services.update

firebasehosting.*

• firebasehosting.sites.create
• firebasehosting.sites.delete
• firebasehosting.sites.get
• firebasehosting.sites.list
• firebasehosting.sites.update

firebaseml.*

• firebaseml.models.create
• firebaseml.models.delete
• firebaseml.models.get
• firebaseml.models.list
• firebaseml.models.update
• firebaseml.modelversions.create
• firebaseml.modelversions.get
• firebaseml.modelversions.list
• firebaseml.modelversions.update

firebasenotifications.*

• firebasenotifications.messages.create
• firebasenotifications.messages.delete
• firebasenotifications.messages.get
• firebasenotifications.messages.list
• firebasenotifications.messages.update

firebaserules.releases.get

firebaserules.releases.list

firebaserules.releases.update

firebaserules.rulesets.create

firebaserules.rulesets.delete

firebaserules.rulesets.get

firebaserules.rulesets.list

identitytoolkit.*

• identitytoolkit.tenants.create
• identitytoolkit.tenants.delete
• identitytoolkit.tenants.get
• identitytoolkit.tenants.getIamPolicy
• identitytoolkit.tenants.list
• identitytoolkit.tenants.setIamPolicy
• identitytoolkit.tenants.update

monitoring.timeSeries.create

orgpolicy.policy.get

resourcemanager.projects.get

resourcemanager.projects.list

resourcemanager.projects.update

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.list

storage.buckets.update

storage.folders.*

• storage.folders.create
• storage.folders.delete
• storage.folders.get
• storage.folders.list
• storage.folders.rename

storage.managedFolders.create

storage.managedFolders.delete

storage.managedFolders.get

storage.managedFolders.list

storage.multipartUploads.*

• storage.multipartUploads.abort
• storage.multipartUploads.create
• storage.multipartUploads.list
• storage.multipartUploads.listParts

storage.objects.*

• storage.objects.create
• storage.objects.createContext
• storage.objects.delete
• storage.objects.deleteContext
• storage.objects.get
• storage.objects.getIamPolicy
• storage.objects.list
• storage.objects.move
• storage.objects.overrideUnlockedRetention
• storage.objects.restore
• storage.objects.setIamPolicy
• storage.objects.setRetention
• storage.objects.update
• storage.objects.updateContext

Firebase SDK Provisioning Service Agent

(roles/firebase.sdkProvisioningServiceAgent)

Access to provision apps with the Admin SDK.

apikeys.keys.list

clientauthconfig.clients.list

cloudmessaging.messages.create

firebase.clients.create

servicemanagement.services.bind

serviceusage.consumerpolicy.*

• serviceusage.consumerpolicy.analyze
• serviceusage.consumerpolicy.get
• serviceusage.consumerpolicy.update

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.services.enable

serviceusage.services.get

serviceusage.values.test

Firebase Viewer

(roles/firebase.viewer)

Read-only access to Firebase products.

apikeys.keys.get

apikeys.keys.list

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

clientauthconfig.brands.get

clientauthconfig.brands.list

cloudasset.assets.searchAllResources

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.locations.*

• cloudbuild.locations.get
• cloudbuild.locations.list

cloudbuild.operations.*

• cloudbuild.operations.get
• cloudbuild.operations.list

cloudconfig.configs.get

cloudfunctions.functions.get

cloudfunctions.functions.getIamPolicy

cloudfunctions.functions.list

cloudfunctions.locations.list

cloudfunctions.operations.*

• cloudfunctions.operations.get
• cloudfunctions.operations.list

cloudnotifications.activities.list

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.get

cloudtoolresults.executions.get

cloudtoolresults.executions.list

cloudtoolresults.histories.get

cloudtoolresults.histories.list

cloudtoolresults.settings.get

cloudtoolresults.steps.get

cloudtoolresults.steps.list

datastore.backups.get

datastore.backups.list

datastore.databases.get

datastore.databases.getMetadata

datastore.databases.list

datastore.entities.get

datastore.entities.list

datastore.indexes.get

datastore.indexes.list

datastore.namespaces.*

• datastore.namespaces.get
• datastore.namespaces.list

datastore.statistics.*

• datastore.statistics.get
• datastore.statistics.list

errorreporting.groups.list

eventarc.channelConnections.get

eventarc.channelConnections.getIamPolicy

eventarc.channelConnections.list

eventarc.channels.get

eventarc.channels.getIamPolicy

eventarc.channels.list

eventarc.enrollments.get

eventarc.enrollments.getIamPolicy

eventarc.enrollments.list

eventarc.googleApiSources.get

eventarc.googleApiSources.getIamPolicy

eventarc.googleApiSources.list

eventarc.googleChannelConfigs.get

eventarc.kafkaSources.get

eventarc.kafkaSources.getIamPolicy

eventarc.kafkaSources.list

eventarc.locations.*

• eventarc.locations.get
• eventarc.locations.list

eventarc.messageBuses.get

eventarc.messageBuses.getIamPolicy

eventarc.messageBuses.list

eventarc.messageBuses.use

eventarc.multiProjectSources.collectGoogleApiEvents

eventarc.operations.get

eventarc.operations.list

eventarc.pipelines.get

eventarc.pipelines.getIamPolicy

eventarc.pipelines.list

eventarc.providers.*

• eventarc.providers.get
• eventarc.providers.list

eventarc.triggers.get

eventarc.triggers.getIamPolicy

eventarc.triggers.list

fcmdata.deliverydata.list

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.links.list

firebase.playLinks.get

firebase.playLinks.list

firebase.projects.get

firebaseabt.experimentresults.get

firebaseabt.experiments.get

firebaseabt.experiments.list

firebaseabt.projectmetadata.get

firebaseanalytics.resources.googleAnalyticsReadAndAnalyze

firebaseappcheck.appAttestConfig.get

firebaseappcheck.automations.get

firebaseappcheck.automations.list

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

firebaseappdistro.groups.list

firebaseappdistro.releases.list

firebaseappdistro.testers.list

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

• firebaseapphosting.locations.get
• firebaseapphosting.locations.list

firebaseapphosting.operations.get

firebaseapphosting.operations.list

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.traffic.get

firebaseauth.configs.get

firebaseauth.users.get

firebasecrash.reports.get

firebasecrashlytics.config.get

firebasecrashlytics.data.get

firebasecrashlytics.issues.get

firebasecrashlytics.issues.list

firebasecrashlytics.sessions.get

firebasedatabase.instances.get

firebasedatabase.instances.list

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

• firebasedataconnect.locations.get
• firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.introspectGraphql

firebasedataconnect.services.list

firebasedynamiclinks.destinations.list

firebasedynamiclinks.domains.get

firebasedynamiclinks.domains.list

firebasedynamiclinks.links.get

firebasedynamiclinks.links.list

firebasedynamiclinks.stats.get

firebaseextensions.configs.list

firebaseextensionspublisher.extensions.get

firebaseextensionspublisher.extensions.list

firebasehosting.sites.get

firebasehosting.sites.list

firebaseinappmessaging.campaigns.get

firebaseinappmessaging.campaigns.list

firebasemessagingcampaigns.campaigns.get

firebasemessagingcampaigns.campaigns.list

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

firebasenotifications.messages.get

firebasenotifications.messages.list

firebaseperformance.data.get

firebaserules.releases.get

firebaserules.releases.list

firebaserules.rulesets.get

firebaserules.rulesets.list

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

firebasevertexai.configs.get

firebasevertexai.promptTemplates.get

firebasevertexai.promptTemplates.list

logging.logEntries.list

monitoring.timeSeries.list

oauthconfig.verification.get

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.locations.*

• recommender.locations.get
• recommender.locations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

remotebuildexecution.blobs.get

resourcemanager.projects.get

resourcemanager.projects.getIamPolicy

resourcemanager.projects.list

run.configurations.*

• run.configurations.get
• run.configurations.list

run.executions.get

run.executions.list

run.jobs.get

run.jobs.getIamPolicy

run.jobs.list

run.jobs.listEffectiveTags

run.jobs.listTagBindings

run.locations.list

run.operations.get

run.operations.list

run.revisions.get

run.revisions.list

run.routes.get

run.routes.list

run.services.get

run.services.getIamPolicy

run.services.list

run.services.listEffectiveTags

run.services.listTagBindings

run.tasks.*

• run.tasks.get
• run.tasks.list

run.workerpools.get

run.workerpools.getIamPolicy

run.workerpools.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.contentsecuritypolicy.get

serviceusage.effectivemcppolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

• serviceusage.groups.list
• serviceusage.groups.listExpandedMembers
• serviceusage.groups.listMembers

serviceusage.mcppolicy.get

serviceusage.operations.get

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list