Firebase Storage roles and permissions

This page lists the IAM roles and permissions for Firebase Storage. To search through all roles and permissions, see the role and permission index.

Firebase Storage roles

Role	Permissions
Cloud Storage for Firebase Admin ^Beta (roles/firebasestorage.admin) Full management of Cloud Storage for Firebase.	firebase.clients.get firebase.clients.list firebase.projects.get firebasestorage.* firebasestorage.buckets.addFirebase firebasestorage.buckets.get firebasestorage.buckets.list firebasestorage.buckets.removeFirebase firebasestorage.defaultBucket.create firebasestorage.defaultBucket.delete firebasestorage.defaultBucket.get resourcemanager.projects.get resourcemanager.projects.list
Cloud Storage for Firebase Viewer ^Beta (roles/firebasestorage.viewer) Read-only access for Cloud Storage for Firebase.	firebasestorage.buckets.get firebasestorage.buckets.list firebasestorage.defaultBucket.get resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent) Access to Cloud Storage for Firebase through API and SDK. Warning: Do not grant service agent roles to any principals except service agents.	storage.buckets.get storage.buckets.getIamPolicy storage.objects.create storage.objects.delete storage.objects.get storage.objects.getIamPolicy storage.objects.list storage.objects.update

Firebase Storage permissions

Permission	Included in roles
firebasestorage.buckets.addFirebase	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Firebase Develop Admin (roles/firebase.developAdmin)
firebasestorage.buckets.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Cloud Storage for Firebase Viewer (roles/firebasestorage.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser)
firebasestorage.buckets.list	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Cloud Storage for Firebase Viewer (roles/firebasestorage.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Security Auditor (roles/iam.securityAuditor) Support User (roles/iam.supportUser)
firebasestorage.buckets.removeFirebase	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Firebase Develop Admin (roles/firebase.developAdmin)
firebasestorage.defaultBucket.create	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Firebase Develop Admin (roles/firebase.developAdmin)
firebasestorage.defaultBucket.delete	Owner (roles/owner) Editor (roles/editor) Firebase Admin (roles/firebase.admin) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Firebase Develop Admin (roles/firebase.developAdmin)
firebasestorage.defaultBucket.get	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Firebase Admin (roles/firebase.admin) Firebase Editor (roles/firebase.editor) Firebase Viewer (roles/firebase.viewer) Cloud Storage for Firebase Admin (roles/firebasestorage.admin) Cloud Storage for Firebase Viewer (roles/firebasestorage.viewer) Firebase Develop Admin (roles/firebase.developAdmin) Firebase Develop Viewer (roles/firebase.developViewer) Support User (roles/iam.supportUser) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (roles/firebase.managementServiceAgent)