Firebase Storage roles and permissions

This page lists the IAM roles and permissions for Firebase Storage. To search through all roles and permissions, see the role and permission index.

Firebase Storage roles

Role Permissions

Role	Permissions
Cloud Storage for Firebase Admin ^Beta (`roles/firebasestorage.admin`) Full management of Cloud Storage for Firebase.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebasestorage.*` `firebasestorage.buckets.addFirebase` `firebasestorage.buckets.get` `firebasestorage.buckets.list` `firebasestorage.buckets.removeFirebase` `firebasestorage.defaultBucket.create` `firebasestorage.defaultBucket.delete` `firebasestorage.defaultBucket.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Storage for Firebase Service Agent (`roles/firebasestorage.serviceAgent`) Access to Cloud Storage for Firebase through API and SDK. Warning: Do not grant service agent roles to any principals except service agents.	`storage.buckets.get` `storage.buckets.getIamPolicy` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.getIamPolicy` `storage.objects.list` `storage.objects.update`
Cloud Storage for Firebase Viewer ^Beta (`roles/firebasestorage.viewer`) Read-only access for Cloud Storage for Firebase.	`firebasestorage.buckets.get` `firebasestorage.buckets.list` `firebasestorage.defaultBucket.get` `resourcemanager.projects.get` `resourcemanager.projects.list`

Cloud Storage for Firebase Admin ^Beta

(roles/firebasestorage.admin)

Full management of Cloud Storage for Firebase.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebasestorage.*

firebasestorage.buckets.addFirebase
firebasestorage.buckets.get
firebasestorage.buckets.list
firebasestorage.buckets.removeFirebase
firebasestorage.defaultBucket.create
firebasestorage.defaultBucket.delete
firebasestorage.defaultBucket.get

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Storage for Firebase Service Agent

(roles/firebasestorage.serviceAgent)

Access to Cloud Storage for Firebase through API and SDK.

storage.buckets.get

storage.buckets.getIamPolicy

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.getIamPolicy

storage.objects.list

storage.objects.update

Cloud Storage for Firebase Viewer ^Beta

(roles/firebasestorage.viewer)

Read-only access for Cloud Storage for Firebase.

firebasestorage.buckets.get

firebasestorage.buckets.list

firebasestorage.defaultBucket.get

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Storage permissions

Permission	Included in roles
`firebasestorage.buckets.addFirebase`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`)
`firebasestorage.buckets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`) Cloud Storage for Firebase Viewer (`roles/firebasestorage.viewer`) Support User (`roles/iam.supportUser`)
`firebasestorage.buckets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`) Cloud Storage for Firebase Viewer (`roles/firebasestorage.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`firebasestorage.buckets.removeFirebase`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`)
`firebasestorage.defaultBucket.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`)
`firebasestorage.defaultBucket.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`)
`firebasestorage.defaultBucket.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Cloud Storage for Firebase Admin (`roles/firebasestorage.admin`) Cloud Storage for Firebase Viewer (`roles/firebasestorage.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)

Firebase Storage roles and permissions