This page lists the IAM roles and permissions for Firebase App Check. To search through all roles and permissions, see the role and permission index .
Firebase App Check roles
Firebase App Check Admin
( roles/
)
Full management of Firebase App Check.
firebaseappcheck.*
-
firebaseappcheck.appAttestConfig. get -
firebaseappcheck.appAttestConfig. update -
firebaseappcheck.appCheckTokens. verify -
firebaseappcheck.automations. create -
firebaseappcheck.automations. delete -
firebaseappcheck.automations. get -
firebaseappcheck.automations. list -
firebaseappcheck.automations. resume -
firebaseappcheck.automations. suspend -
firebaseappcheck.automations. update -
firebaseappcheck.debugTokens. get -
firebaseappcheck.debugTokens. update -
firebaseappcheck.deviceCheckConfig. get -
firebaseappcheck.deviceCheckConfig. update -
firebaseappcheck.playIntegrityConfig. get -
firebaseappcheck.playIntegrityConfig. update -
firebaseappcheck.recaptchaEnterpriseConfig. get -
firebaseappcheck.recaptchaEnterpriseConfig. update -
firebaseappcheck.recaptchaV3Config. get -
firebaseappcheck.recaptchaV3Config. update -
firebaseappcheck.resourcePolicies. get -
firebaseappcheck.resourcePolicies. update -
firebaseappcheck.safetyNetConfig. get -
firebaseappcheck.safetyNetConfig. update -
firebaseappcheck.services.get -
firebaseappcheck.services. update
Firebase App Check Viewer
( roles/
)
Read-only access for Firebase App Check.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.
firebaseappcheck.services.get
Firebase App Check Token Verifier
( roles/
)
Access to token verification capabilities for Firebase App Check.
firebaseappcheck.
Service agent roles
Service agent roles should only be granted to service agents .
Firebase App Check Service Agent
( roles/
)
Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.
recaptchaenterprise.
-
recaptchaenterprise.assessments. annotate -
recaptchaenterprise.assessments. create
serviceusage.services.use
Firebase App Check permissions
firebaseappcheck.
appAttestConfig.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
appAttestConfig.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
appCheckTokens.
verify
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Check Token Verifier
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
create
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
delete
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Security Admin
( roles/
)
Security Reviewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Security Auditor
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
resume
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
suspend
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
automations.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
debugTokens.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
debugTokens.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
deviceCheckConfig.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
deviceCheckConfig.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
playIntegrityConfig.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
playIntegrityConfig.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
recaptchaEnterpriseConfig.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
recaptchaEnterpriseConfig.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
recaptchaV3Config.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
recaptchaV3Config.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
resourcePolicies.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
OAuth Config Editor
( roles/
)
OAuth Config Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
resourcePolicies.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
OAuth Config Editor
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
safetyNetConfig.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
safetyNetConfig.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.services.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Editor
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase App Check Viewer
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent
firebaseappcheck.
services.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase App Check Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Service agent roles
- Firebase Admin SDK Administrator Service Agent
(
roles/)firebase.sdkAdminServiceAgent

