Firebase Data Connect roles and permissions

This page lists the IAM roles and permissions for Firebase Data Connect. To search through all roles and permissions, see the role and permission index.

Firebase Data Connect roles

Role	Permissions
Firebase Data Connect API Admin ^Beta (roles/firebasedataconnect.admin) Full access to Firebase Data Connect API resources, including data.	firebasedataconnect.* firebasedataconnect.connectorRevisions.delete firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.create firebasedataconnect.connectors.delete firebasedataconnect.connectors.get firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.connectors.list firebasedataconnect.connectors.update firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.cancel firebasedataconnect.operations.delete firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.delete firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.create firebasedataconnect.schemas.delete firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.schemas.update firebasedataconnect.services.create firebasedataconnect.services.delete firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list firebasedataconnect.services.update resourcemanager.projects.get resourcemanager.projects.list
Firebase Data Connect API Viewer ^Beta (roles/firebasedataconnect.viewer) Readonly access to Firebase Data Connect API resources. This role does not grant any access to data.	firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.get firebasedataconnect.connectors.list firebasedataconnect.locations.* firebasedataconnect.locations.get firebasedataconnect.locations.list firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.services.get firebasedataconnect.services.introspectGraphql firebasedataconnect.services.list resourcemanager.projects.get resourcemanager.projects.list
Firebase Data Connect API Data Admin ^Beta (roles/firebasedataconnect.dataAdmin) Full access to data sources.	firebasedataconnect.connectors.impersonateMutation firebasedataconnect.connectors.impersonateQuery firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.introspectGraphql
Firebase Data Connect API Data Viewer ^Beta (roles/firebasedataconnect.dataViewer) Readonly access to data sources.	firebasedataconnect.connectors.impersonateQuery firebasedataconnect.services.executeGraphqlRead firebasedataconnect.services.introspectGraphql

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Firebase Data Connect Service Agent (roles/firebasedataconnect.serviceAgent) Gives Firebase Data Connect access to administer Cloud SQL instances. Warning: Do not grant service agent roles to any principals except service agents.	cloudsql.databases.create cloudsql.databases.get cloudsql.instances.connect cloudsql.instances.get cloudsql.instances.login cloudsql.users.create cloudsql.users.get run.routes.invoke serviceusage.services.use

Firebase Data Connect permissions

Permission	Included in roles
firebasedataconnect.connectorRevisions.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectorRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectorRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.impersonateMutation	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.impersonateQuery	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.connectors.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.locations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.locations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.operations.cancel	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.operations.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.operations.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.operations.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemaRevisions.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemaRevisions.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemaRevisions.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemas.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemas.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemas.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemas.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.schemas.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.executeGraphql	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.executeGraphqlRead	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.introspectGraphql	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin) Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)
firebasedataconnect.services.update	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Firebase Data Connect API Admin (roles/firebasedataconnect.admin) Firebase Develop Admin (roles/firebase.developAdmin) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)