Firebase App Check roles and permissions

This page lists the IAM roles and permissions for Firebase App Check. To search through all roles and permissions, see the role and permission index .

Firebase App Check roles

Role

Permissions

Firebase App Check Admin

( roles/ firebaseappcheck.admin )

Full management of Firebase App Check.

firebaseappcheck.*

firebaseappcheck. appAttestConfig. get
firebaseappcheck. appAttestConfig. update
firebaseappcheck. appCheckTokens. verify
firebaseappcheck. automations. create
firebaseappcheck. automations. delete
firebaseappcheck. automations. get
firebaseappcheck. automations. list
firebaseappcheck. automations. resume
firebaseappcheck. automations. suspend
firebaseappcheck. automations. update
firebaseappcheck. debugTokens. get
firebaseappcheck. debugTokens. update
firebaseappcheck. deviceCheckConfig. get
firebaseappcheck. deviceCheckConfig. update
firebaseappcheck. playIntegrityConfig. get
firebaseappcheck. playIntegrityConfig. update
firebaseappcheck. recaptchaEnterpriseConfig. get
firebaseappcheck. recaptchaEnterpriseConfig. update
firebaseappcheck. recaptchaV3Config. get
firebaseappcheck. recaptchaV3Config. update
firebaseappcheck. resourcePolicies. get
firebaseappcheck. resourcePolicies. update
firebaseappcheck. safetyNetConfig. get
firebaseappcheck. safetyNetConfig. update
firebaseappcheck.services.get
firebaseappcheck. services. update

Firebase App Check Service Agent

( roles/ firebaseappcheck.serviceAgent )

Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.

recaptchaenterprise. assessments.*

recaptchaenterprise. assessments. annotate
recaptchaenterprise. assessments. create

serviceusage.services.use

Firebase App Check Token Verifier

( roles/ firebaseappcheck.tokenVerifier )

Access to token verification capabilities for Firebase App Check.

firebaseappcheck. appCheckTokens. verify

Firebase App Check Viewer

( roles/ firebaseappcheck.viewer )

Read-only access for Firebase App Check.

firebaseappcheck. appAttestConfig. get

firebaseappcheck. automations. get

firebaseappcheck. automations. list

firebaseappcheck. debugTokens. get

firebaseappcheck. deviceCheckConfig. get

firebaseappcheck. playIntegrityConfig. get

firebaseappcheck. recaptchaEnterpriseConfig. get

firebaseappcheck. recaptchaV3Config. get

firebaseappcheck. resourcePolicies. get

firebaseappcheck. safetyNetConfig. get

firebaseappcheck.services.get

Firebase App Check permissions

Permission	Included in roles
`firebaseappcheck. appAttestConfig. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. appAttestConfig. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. appCheckTokens. verify`	Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Token Verifier ( `roles/ firebaseappcheck.tokenVerifier` )
`firebaseappcheck. automations. create`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. automations. delete`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. automations. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. automations. list`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Security Admin ( `roles/ iam.securityAdmin` ) Security Auditor ( `roles/ iam.securityAuditor` ) Security Reviewer ( `roles/ iam.securityReviewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. automations. resume`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. automations. suspend`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. automations. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. debugTokens. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. debugTokens. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. deviceCheckConfig. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. deviceCheckConfig. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. playIntegrityConfig. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. playIntegrityConfig. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. recaptchaEnterpriseConfig. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. recaptchaEnterpriseConfig. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. recaptchaV3Config. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. recaptchaV3Config. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck. resourcePolicies. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` ) OAuth Config Editor ( `roles/ oauthconfig.editor` ) OAuth Config Viewer ( `roles/ oauthconfig.viewer` )
`firebaseappcheck. resourcePolicies. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) OAuth Config Editor ( `roles/ oauthconfig.editor` )
`firebaseappcheck. safetyNetConfig. get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. safetyNetConfig. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )
`firebaseappcheck.services.get`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Viewer ( `roles/ viewer` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Develop Viewer ( `roles/ firebase.developViewer` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase Viewer ( `roles/ firebase.viewer` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` ) Firebase App Check Viewer ( `roles/ firebaseappcheck.viewer` ) Support User ( `roles/ iam.supportUser` )
`firebaseappcheck. services. update`	Owner ( `roles/ owner` ) Editor ( `roles/ editor` ) Firebase Admin ( `roles/ firebase.admin` ) Firebase Develop Admin ( `roles/ firebase.developAdmin` ) Firebase Admin SDK Administrator Service Agent ( `roles/ firebase.sdkAdminServiceAgent` ) Firebase App Check Admin ( `roles/ firebaseappcheck.admin` )

Firebase App Check roles and permissions