Firebase Realtime Database roles and permissions

This page lists the IAM roles and permissions for Firebase Realtime Database. To search through all roles and permissions, see the role and permission index.

Firebase Realtime Database roles

Role	Permissions
Firebase Realtime Database Admin (roles/firebasedatabase.admin) Full read/write access to Firebase Realtime Database resources.	firebase.clients.get firebase.clients.list firebase.projects.get firebasedatabase.* firebasedatabase.instances.create firebasedatabase.instances.delete firebasedatabase.instances.disable firebasedatabase.instances.get firebasedatabase.instances.list firebasedatabase.instances.reenable firebasedatabase.instances.undelete firebasedatabase.instances.update resourcemanager.projects.get resourcemanager.projects.list
Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Read-only access to Firebase Realtime Database resources.	firebase.clients.get firebase.clients.list firebase.projects.get firebasedatabase.instances.get firebasedatabase.instances.list resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Firebase Realtime Database Service Agent (roles/firebasedatabase.serviceAgent) Access to publish triggers Warning: Do not grant service agent roles to any principals except service agents.	pubsub.topics.publish serviceusage.services.use

Firebase Realtime Database permissions

Permission	Included in roles
firebasedatabase.instances.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.disable	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Realtime Database Viewer (roles/firebasedatabase.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.reenable	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.undelete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedatabase.instances.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Realtime Database Admin (roles/firebasedatabase.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)