Firebase Authentication roles and permissions

This page lists the IAM roles and permissions for Firebase Authentication. To search through all roles and permissions, see the role and permission index.

Firebase Authentication roles

Role	Permissions
Firebase Authentication Admin (roles/firebaseauth.admin) Full read/write access to Firebase Authentication resources.	firebase.clients.get firebase.clients.list firebase.projects.get firebaseauth.* firebaseauth.configs.create firebaseauth.configs.get firebaseauth.configs.getHashConfig firebaseauth.configs.getSecret firebaseauth.configs.update firebaseauth.users.create firebaseauth.users.createSession firebaseauth.users.delete firebaseauth.users.get firebaseauth.users.sendEmail firebaseauth.users.update resourcemanager.projects.get resourcemanager.projects.list
Firebase Authentication Viewer (roles/firebaseauth.viewer) Read-only access to Firebase Authentication resources.	firebase.clients.get firebase.clients.list firebase.projects.get firebaseauth.configs.get firebaseauth.users.get resourcemanager.projects.get resourcemanager.projects.list

Firebase Authentication permissions

Permission	Included in roles
firebaseauth.configs.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.configs.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Authentication Admin (roles/firebaseauth.admin) Firebase Authentication Viewer (roles/firebaseauth.viewer) Identity Platform Admin (roles/identityplatform.admin) Identity Platform Viewer (roles/identityplatform.viewer) Identity Toolkit Admin (roles/identitytoolkit.admin) Identity Toolkit Viewer (roles/identitytoolkit.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.configs.getHashConfig	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin)
firebaseauth.configs.getSecret	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.configs.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.users.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.users.createSession	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.users.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.users.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Authentication Admin (roles/firebaseauth.admin) Firebase Authentication Viewer (roles/firebaseauth.viewer) Identity Platform Admin (roles/identityplatform.admin) Identity Platform Viewer (roles/identityplatform.viewer) Identity Toolkit Admin (roles/identitytoolkit.admin) Identity Toolkit Viewer (roles/identitytoolkit.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.users.sendEmail	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebaseauth.users.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Authentication Admin (roles/firebaseauth.admin) Identity Platform Admin (roles/identityplatform.admin) Identity Toolkit Admin (roles/identitytoolkit.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)