Firebase Authentication roles and permissions

This page lists the IAM roles and permissions for Firebase Authentication. To search through all roles and permissions, see the role and permission index.

Firebase Authentication roles

Role Permissions

Role	Permissions
Firebase Authentication Admin (`roles/firebaseauth.admin`) Full read/write access to Firebase Authentication resources.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebaseauth.*` `firebaseauth.configs.create` `firebaseauth.configs.get` `firebaseauth.configs.getHashConfig` `firebaseauth.configs.getSecret` `firebaseauth.configs.update` `firebaseauth.users.create` `firebaseauth.users.createSession` `firebaseauth.users.delete` `firebaseauth.users.get` `firebaseauth.users.sendEmail` `firebaseauth.users.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Firebase Authentication Viewer (`roles/firebaseauth.viewer`) Read-only access to Firebase Authentication resources.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebaseauth.configs.get` `firebaseauth.users.get` `resourcemanager.projects.get` `resourcemanager.projects.list`

Firebase Authentication Admin

(roles/firebaseauth.admin)

Full read/write access to Firebase Authentication resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebaseauth.*

firebaseauth.configs.create
firebaseauth.configs.get
firebaseauth.configs.getHashConfig
firebaseauth.configs.getSecret
firebaseauth.configs.update
firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Authentication Viewer

(roles/firebaseauth.viewer)

Read-only access to Firebase Authentication resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebaseauth.configs.get

firebaseauth.users.get

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Authentication permissions

Permission	Included in roles
`firebaseauth.configs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseauth.configs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Firebase Authentication Viewer (`roles/firebaseauth.viewer`) Support User (`roles/iam.supportUser`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Platform Viewer (`roles/identityplatform.viewer`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Identity Toolkit Viewer (`roles/identitytoolkit.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseauth.configs.getHashConfig`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`firebaseauth.configs.getSecret`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`firebaseauth.configs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseauth.users.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`firebaseauth.users.createSession`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`firebaseauth.users.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`firebaseauth.users.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Viewer (`roles/firebase.viewer`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Firebase Authentication Viewer (`roles/firebaseauth.viewer`) Support User (`roles/iam.supportUser`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Platform Viewer (`roles/identityplatform.viewer`) Identity Toolkit Admin (`roles/identitytoolkit.admin`) Identity Toolkit Viewer (`roles/identitytoolkit.viewer`)
`firebaseauth.users.sendEmail`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)
`firebaseauth.users.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`) Firebase Authentication Admin (`roles/firebaseauth.admin`) Identity Platform Admin (`roles/identityplatform.admin`) Identity Toolkit Admin (`roles/identitytoolkit.admin`)

Firebase Authentication roles and permissions