Firebase App Check roles and permissions

This page lists the IAM roles and permissions for Firebase App Check. To search through all roles and permissions, see the role and permission index.

Firebase App Check roles

Role Permissions

(roles/firebaseappcheck.admin)

Full management of Firebase App Check.

firebaseappcheck.*

  • firebaseappcheck.appAttestConfig.get
  • firebaseappcheck.appAttestConfig.update
  • firebaseappcheck.appCheckTokens.verify
  • firebaseappcheck.automations.create
  • firebaseappcheck.automations.delete
  • firebaseappcheck.automations.get
  • firebaseappcheck.automations.list
  • firebaseappcheck.automations.resume
  • firebaseappcheck.automations.suspend
  • firebaseappcheck.automations.update
  • firebaseappcheck.debugTokens.get
  • firebaseappcheck.debugTokens.update
  • firebaseappcheck.deviceCheckConfig.get
  • firebaseappcheck.deviceCheckConfig.update
  • firebaseappcheck.playIntegrityConfig.get
  • firebaseappcheck.playIntegrityConfig.update
  • firebaseappcheck.recaptchaEnterpriseConfig.get
  • firebaseappcheck.recaptchaEnterpriseConfig.update
  • firebaseappcheck.recaptchaV3Config.get
  • firebaseappcheck.recaptchaV3Config.update
  • firebaseappcheck.resourcePolicies.get
  • firebaseappcheck.resourcePolicies.update
  • firebaseappcheck.safetyNetConfig.get
  • firebaseappcheck.safetyNetConfig.update
  • firebaseappcheck.services.get
  • firebaseappcheck.services.update

(roles/firebaseappcheck.serviceAgent)

Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.

recaptchaenterprise.assessments.*

  • recaptchaenterprise.assessments.annotate
  • recaptchaenterprise.assessments.create

serviceusage.services.use

(roles/firebaseappcheck.tokenVerifier)

Access to token verification capabilities for Firebase App Check.

firebaseappcheck.appCheckTokens.verify

(roles/firebaseappcheck.viewer)

Read-only access for Firebase App Check.

firebaseappcheck.appAttestConfig.get

firebaseappcheck.automations.get

firebaseappcheck.automations.list

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

Firebase App Check permissions

Permission Included in roles

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Token Verifier (roles/firebaseappcheck.tokenVerifier)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

OAuth Config Editor (roles/oauthconfig.editor)

OAuth Config Viewer (roles/oauthconfig.viewer)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

OAuth Config Editor (roles/oauthconfig.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)