OAuthConfig roles and permissions

This page lists the IAM roles and permissions for OAuthConfig. To search through all roles and permissions, see the role and permission index.

Role Permissions

Role	Permissions
OAuth Config Editor ^Beta (`roles/oauthconfig.editor`) Read/write access to OAuth config resources	`clientauthconfig.` `clientauthconfig.brands.create` `clientauthconfig.brands.delete` `clientauthconfig.brands.get` `clientauthconfig.brands.list` `clientauthconfig.brands.update` `clientauthconfig.clients.create` `clientauthconfig.clients.createSecret` `clientauthconfig.clients.delete` `clientauthconfig.clients.get` `clientauthconfig.clients.getWithSecret` `clientauthconfig.clients.list` `clientauthconfig.clients.listWithSecrets` `clientauthconfig.clients.undelete` `clientauthconfig.clients.update` `firebase.clients.create` `firebase.clients.get` `firebase.clients.list` `firebase.clients.update` `firebaseappcheck.resourcePolicies.` `firebaseappcheck.resourcePolicies.get` `firebaseappcheck.resourcePolicies.update` `oauthconfig.*` `oauthconfig.clientpolicy.get` `oauthconfig.testusers.get` `oauthconfig.testusers.update` `oauthconfig.verification.get` `oauthconfig.verification.submit` `oauthconfig.verification.update`
OAuth Config Viewer ^Beta (`roles/oauthconfig.viewer`) Read-only access to OAuth config resources	`clientauthconfig.brands.get` `clientauthconfig.brands.list` `clientauthconfig.clients.get` `clientauthconfig.clients.list` `firebase.clients.get` `firebase.clients.list` `firebaseappcheck.resourcePolicies.get` `oauthconfig.clientpolicy.get` `oauthconfig.testusers.get` `oauthconfig.verification.get`

OAuth Config Editor ^Beta

(roles/oauthconfig.editor)

Read/write access to OAuth config resources

clientauthconfig.*

clientauthconfig.brands.create
clientauthconfig.brands.delete
clientauthconfig.brands.get
clientauthconfig.brands.list
clientauthconfig.brands.update
clientauthconfig.clients.create
clientauthconfig.clients.createSecret
clientauthconfig.clients.delete
clientauthconfig.clients.get
clientauthconfig.clients.getWithSecret
clientauthconfig.clients.list
clientauthconfig.clients.listWithSecrets
clientauthconfig.clients.undelete
clientauthconfig.clients.update

firebase.clients.create

firebase.clients.get

firebase.clients.list

firebase.clients.update

firebaseappcheck.resourcePolicies.*

firebaseappcheck.resourcePolicies.get
firebaseappcheck.resourcePolicies.update

oauthconfig.*

oauthconfig.clientpolicy.get
oauthconfig.testusers.get
oauthconfig.testusers.update
oauthconfig.verification.get
oauthconfig.verification.submit
oauthconfig.verification.update

OAuth Config Viewer ^Beta

(roles/oauthconfig.viewer)

Read-only access to OAuth config resources

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.clients.get

clientauthconfig.clients.list

firebase.clients.get

firebase.clients.list

firebaseappcheck.resourcePolicies.get

oauthconfig.clientpolicy.get

oauthconfig.testusers.get

oauthconfig.verification.get

OAuthConfig permissions

Permission	Included in roles
`oauthconfig.clientpolicy.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) OAuth Config Editor (`roles/oauthconfig.editor`) OAuth Config Viewer (`roles/oauthconfig.viewer`)
`oauthconfig.testusers.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Support User (`roles/iam.supportUser`) OAuth Config Editor (`roles/oauthconfig.editor`) OAuth Config Viewer (`roles/oauthconfig.viewer`)
`oauthconfig.testusers.update`	Owner (`roles/owner`) Editor (`roles/editor`) OAuth Config Editor (`roles/oauthconfig.editor`)
`oauthconfig.verification.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Workspace Marketplace App Configuration Admin (`roles/appmetadata.workspaceMarketplaceAppConfigurationAdmin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) OAuth Config Editor (`roles/oauthconfig.editor`) OAuth Config Viewer (`roles/oauthconfig.viewer`)
`oauthconfig.verification.submit`	Owner (`roles/owner`) Editor (`roles/editor`) OAuth Config Editor (`roles/oauthconfig.editor`)
`oauthconfig.verification.update`	Owner (`roles/owner`) Editor (`roles/editor`) OAuth Config Editor (`roles/oauthconfig.editor`)