Watch demos on how to build & run AI-powered apps with Firebase at Demo Day '24. Watch now.

Firebase product-category predefined roles

These roles grant full read/write or read-only access to groups of products. They are structured around Google Analytics and general product categories.

Assign these product-category roles to project members using the Firebase console or the Google Cloud console.

Firebase Analytics roles

Role	Description	Permissions
Firebase Analytics Admin `roles/firebase.analyticsAdmin`	Full read/write access to: Google Analytics	Firebase Analytics Admin permissions firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebase.projects.list firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseextensions.configs.get firebaseextensions.configs.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Firebase Analytics Viewer `roles/firebase.analyticsViewer`	Read-only access to: Google Analytics	Firebase Analytics Viewer permissions firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebase.projects.list firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseextensions.configs.get firebaseextensions.configs.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list

Firebase Develop roles

Role	Description	Permissions
Firebase Develop Admin `roles/firebase.developAdmin`	Full read/write access to: Google Analytics Firebase App Check Firebase App Hosting Firebase Authentication Firebase Realtime Database Cloud Firestore Cloud Storage for Firebase Firebase Hosting Cloud Functions for Firebase (deploying functions requires special configuration) Firebase ML	Firebase Develop Admin permissions apikeys.keys.get apikeys.keys.list apikeys.keys.lookup appengine.applications.get automl.* clientauthconfig.brands.get clientauthconfig.brands.list clientauthconfig.brands.update clientauthconfig.clients.get clientauthconfig.clients.list cloudfunctions.* datastore.* errorreporting.groups.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.* firebaseapphosting.* firebaseauth.* firebasedatabase.* firebaseextensions.configs.list firebasehosting.* firebaseinstallations.instances.delete firebaseml.* firebaserules.* logging.logEntries.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list runtimeconfig.* serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list storage.*
Firebase Develop Viewer `roles/firebase.developViewer`	Read-only access to: Google Analytics Firebase App Check Firebase App Hosting Firebase Authentication Firebase Realtime Database Cloud Firestore Cloud Storage for Firebase Firebase Hosting Cloud Functions for Firebase Firebase ML	Firebase Develop Viewer permissions apikeys.keys.get apikeys.keys.list automl..get automl..list clientauthconfig.brands.get clientauthconfig.brands.list cloudfunctions.functions.get cloudfunctions.functions.list cloudfunctions.locations.list cloudfunctions.operations.get cloudfunctions.operations.list datastore.databases.get datastore.database.getMetadata datastore.databases.getIamPolicy datastore.databases.list datastore.entities.get datastore.entities.list datastore.indexes.get datastore.indexes.list datastore.namespaces.get datastore.namespaces.getIamPolicy datastore.namespaces.list datastore.statistics.get datastore.statistics.list errorreporting.groups.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.appAttestConfig.get firebaseappcheck.debugTokens.get firebaseappcheck.deviceCheckConfig.get firebaseappcheck.playIntegrityConfig.get firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaV3Config.get firebaseappcheck.safetyNetConfig.get firebaseappcheck.services.get firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get firebaseapphosting.traffic.list firebaseauth.configs.get firebaseauth.users.get firebasedatabase.instances.get firebasedatabase.instances.list firebaseextensions.configs.list firebasehosting.sites.get firebasehosting.sites.list firebaseml.compressionjobs.get firebaseml.compressionjobs.list firebaseml.models.get firebaseml.models.list firebaseml.modelversions.get firebaseml.modelversions.list firebaserules.releases.get firebaserules.releases.list firebaserules.rulesets.get firebaserules.rulesets.list logging.logEntries.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.objects.get storage.objects.getIamPolicy storage.objects.list

Firebase Quality roles

Role	Description	Permissions
Firebase Quality Admin `roles/firebase.qualityAdmin`	Full read/write access to: Google Analytics Firebase App Distribution Firebase Crashlytics Firebase Performance Monitoring	Firebase Quality Admin permissions apikeys.keys.get apikeys.keys.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.* firebaseappdistro.* firebasecrash.* firebasecrashlytics.* firebaseextensions.configs.list firebaseperformance.* monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Firebase Quality Viewer `roles/firebase.qualityViewer`	Read-only access to: Google Analytics Firebase App Distribution Firebase Crashlytics Firebase Performance Monitoring	Firebase Quality Viewer permissions apikeys.keys.get apikeys.keys.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappdistro.groups.list firebaseappdistro.releases.list firebaseappdistro.testers.list firebasecrash.reports.get firebasecrashlytics.config.get firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.sessions.get firebaseextensions.configs.list firebaseperformance.data.get monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list

Firebase Grow roles

Role	Description	Permissions
Firebase Grow Admin `roles/firebase.growthAdmin`	Full read/write access to: Google Analytics Firebase A/B Testing Firebase messaging campaigns Firebase Cloud Messaging Firebase In-App Messaging Firebase Remote Config Firebase Dynamic Links	Firebase Grow Admin permissions apikeys.keys.get apikeys.keys.list clientauthconfig.clients.get clientauthconfig.clients.list cloudconfig.* cloudmessaging.messages.create firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebasedynamiclinks.* firebaseextensions.configs.list firebaseinappmessaging.* firebasemessagingcampaigns.* firebasenotifications.* monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Firebase Grow Viewer `roles/firebase.growthViewer`	Read-only access to: Google Analytics Firebase A/B Testing Firebase messaging campaigns Firebase Cloud Messaging Firebase In-App Messaging Firebase Remote Config Firebase Dynamic Links	Firebase Grow Viewer permissions apikeys.keys.get apikeys.keys.list cloudconfig.configs.get firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.experimentresults.get firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.projectmetadata.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.destinations.list firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.stats.get firebaseextensions.configs.list firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebasenotifications.messages.get firebasenotifications.messages.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list