This page lists the IAM roles and permissions for Firebase App Hosting. To search through all roles and permissions, see the role and permission index .
Firebase App Hosting roles
Firebase App Hosting Admin Beta
( roles/
)
Full access to Firebase App Hosting API resources.
firebaseapphosting.*
-
firebaseapphosting.backends. create -
firebaseapphosting.backends. delete -
firebaseapphosting.backends. get -
firebaseapphosting.backends. list -
firebaseapphosting.backends. update -
firebaseapphosting.builds. create -
firebaseapphosting.builds. delete -
firebaseapphosting.builds.get -
firebaseapphosting.builds.list -
firebaseapphosting.builds. update -
firebaseapphosting.domains. create -
firebaseapphosting.domains. delete -
firebaseapphosting.domains.get -
firebaseapphosting.domains. list -
firebaseapphosting.domains. update -
firebaseapphosting.locations. get -
firebaseapphosting.locations. list -
firebaseapphosting.operations. cancel -
firebaseapphosting.operations. delete -
firebaseapphosting.operations. get -
firebaseapphosting.operations. list -
firebaseapphosting.rollouts. create -
firebaseapphosting.rollouts. delete -
firebaseapphosting.rollouts. get -
firebaseapphosting.rollouts. list -
firebaseapphosting.rollouts. update -
firebaseapphosting.traffic.get -
firebaseapphosting.traffic. update
resourcemanager.projects.get
resourcemanager.projects.list
Firebase App Hosting Compute Runner Beta
( roles/
)
Contains the basic necessary permissions for building and running Apps on Firebase App Hosting. Gives access to get and update App Hosting builds, upload artifacts to Artifact Registry and Storage, write logs. Intended to be granted to the user-supplied App Hosting Compute service account.
artifactregistry.
artifactregistry.attachments.*
-
artifactregistry.attachments. create -
artifactregistry.attachments. delete -
artifactregistry.attachments. get -
artifactregistry.attachments. list
artifactregistry.
-
artifactregistry.dockerimages. get -
artifactregistry.dockerimages. list
artifactregistry.
artifactregistry.files.get
artifactregistry.files.list
artifactregistry.files.update
artifactregistry.files.upload
artifactregistry.
artifactregistry.locations.*
-
artifactregistry.locations.get -
artifactregistry.locations. list
artifactregistry.
-
artifactregistry.mavenartifacts. get -
artifactregistry.mavenartifacts. list
artifactregistry.npmpackages.*
-
artifactregistry.npmpackages. get -
artifactregistry.npmpackages. list
artifactregistry.packages.get
artifactregistry.packages.list
artifactregistry.
artifactregistry.
artifactregistry.
-
artifactregistry.pythonpackages. get -
artifactregistry.pythonpackages. list
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.rules.get
artifactregistry.rules.list
artifactregistry.tags.create
artifactregistry.tags.get
artifactregistry.tags.list
artifactregistry.tags.update
artifactregistry.versions.get
artifactregistry.versions.list
artifactregistry.
cloudtrace.traces.patch
developerconnect.
developerconnect.
developerconnect.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.
firebaseapphosting.domains.get
firebaseapphosting.
firebaseapphosting.locations.*
-
firebaseapphosting.locations. get -
firebaseapphosting.locations. list
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.traffic.get
logging.logEntries.create
logging.logEntries.route
monitoring.
monitoring.
monitoring.
monitoring.
-
monitoring.monitoredResourceDescriptors. get -
monitoring.monitoredResourceDescriptors. list
monitoring.timeSeries.create
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
storage.folders.*
-
storage.folders.create -
storage.folders.delete -
storage.folders.get -
storage.folders.list -
storage.folders.rename
storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.list
storage.multipartUploads.*
-
storage.multipartUploads.abort -
storage.multipartUploads. create -
storage.multipartUploads.list -
storage.multipartUploads. listParts
storage.objects.create
storage.objects.delete
storage.objects.get
storage.objects.list
storage.objects.move
storage.objects.restore
storage.objects.setRetention
storage.objects.update
telemetry.metrics.write
telemetry.traces.write
Firebase App Hosting Developer Beta
( roles/
)
Grants read & update access to Firebase App Hosting backend, builds, and releases resources, plus permission to invoke the backend, but doesn't allow for new backends to be created.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.builds.*
-
firebaseapphosting.builds. create -
firebaseapphosting.builds. delete -
firebaseapphosting.builds.get -
firebaseapphosting.builds.list -
firebaseapphosting.builds. update
firebaseapphosting.domains.get
firebaseapphosting.
firebaseapphosting.locations.*
-
firebaseapphosting.locations. get -
firebaseapphosting.locations. list
firebaseapphosting.
-
firebaseapphosting.operations. cancel -
firebaseapphosting.operations. delete -
firebaseapphosting.operations. get -
firebaseapphosting.operations. list
firebaseapphosting.rollouts.*
-
firebaseapphosting.rollouts. create -
firebaseapphosting.rollouts. delete -
firebaseapphosting.rollouts. get -
firebaseapphosting.rollouts. list -
firebaseapphosting.rollouts. update
firebaseapphosting.traffic.*
-
firebaseapphosting.traffic.get -
firebaseapphosting.traffic. update
resourcemanager.projects.get
resourcemanager.projects.list
Firebase App Hosting Service Agent
( roles/
)
Gives Firebase App Hosting access to resource for Building & Deploying Backends.
artifactregistry.
-
artifactregistry.dockerimages. get -
artifactregistry.dockerimages. list
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
artifactregistry.
cloudbuild.builds.create
cloudbuild.builds.get
cloudbuild.builds.update
cloudbuild.connections.get
cloudbuild.operations.get
cloudbuild.
cloudbuild.
cloudbuild.repositories.get
developerconnect.
developerconnect.
developerconnect.
developerconnect.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.traffic.*
-
firebaseapphosting.traffic.get -
firebaseapphosting.traffic. update
iam.serviceAccounts.actAs
run.operations.delete
run.operations.get
run.revisions.delete
run.revisions.get
run.routes.get
run.routes.invoke
run.services.create
run.services.delete
run.services.get
run.services.update
serviceusage.services.use
Firebase App Hosting Viewer Beta
( roles/
)
Grants readonly access to Firebase App Hosting resources, but not permission to invoke the backend. Intended for auditors, PMs, ect. Includes minimal viewer permissions for Firebase Console.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.domains.get
firebaseapphosting.
firebaseapphosting.locations.*
-
firebaseapphosting.locations. get -
firebaseapphosting.locations. list
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.
firebaseapphosting.traffic.get
resourcemanager.projects.get
resourcemanager.projects.list
Firebase App Hosting permissions
firebaseapphosting.
backends.
create
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
backends.
delete
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
firebaseapphosting.
backends.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
backends.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
backends.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
builds.
create
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
builds.
delete
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
firebaseapphosting.builds.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.builds.list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
builds.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
domains.
create
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Service agent roles
- Firebase Service Management Service Agent
(
roles/)firebase.managementServiceAgent
firebaseapphosting.
domains.
delete
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
firebaseapphosting.domains.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Service Management Service Agent
(
roles/)firebase.managementServiceAgent
firebaseapphosting.
domains.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase Service Management Service Agent
(
roles/)firebase.managementServiceAgent
firebaseapphosting.
domains.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Service agent roles
- Firebase Service Management Service Agent
(
roles/)firebase.managementServiceAgent
firebaseapphosting.
locations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
firebaseapphosting.
locations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
firebaseapphosting.
operations.
cancel
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
operations.
delete
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
firebaseapphosting.
operations.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
operations.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
firebaseapphosting.
rollouts.
create
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
rollouts.
delete
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
firebaseapphosting.
rollouts.
get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
rollouts.
list
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Security Admin
( roles/
)
Security Auditor
( roles/
)
Security Reviewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
rollouts.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.traffic.get
Owner
( roles/
)
Editor
( roles/
)
Viewer
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase Develop Viewer
( roles/
)
Firebase Viewer
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Compute Runner
( roles/
)
Firebase App Hosting Developer
( roles/
)
Firebase App Hosting Viewer
( roles/
)
Support User
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent
firebaseapphosting.
traffic.
update
Owner
( roles/
)
Editor
( roles/
)
Firebase Admin
( roles/
)
Firebase Develop Admin
( roles/
)
Firebase App Hosting Admin
( roles/
)
Firebase App Hosting Developer
( roles/
)
Service agent roles
- Firebase App Hosting Service Agent
(
roles/)firebaseapphosting.serviceAgent

