Firebase Remote Config roles and permissions

This page lists the IAM roles and permissions for Firebase Remote Config. Tosearch through all roles and permissions, see therole andpermission index.

Firebase Remote Config roles

RolePermissions

Firebase Remote Config Admin

(roles/cloudconfig.admin)

Full access to Firebase Remote Config resources.

cloudconfig.*

  • cloudconfig.configs.get
  • cloudconfig.configs.update

firebase.clients.get

firebase.clients.list

firebase.projects.get

resourcemanager.projects.get

resourcemanager.projects.list

Infrastructure Manager Service Agent

(roles/cloudconfig.serviceAgent)

Gives Infrastructure Manager service agent access to managed resources

Warning: Do not grant service agent roles to any principals exceptservice agents.

cloudbuild.builds.create

cloudbuild.builds.get

cloudbuild.builds.list

cloudbuild.builds.update

cloudbuild.workerpools.use

iam.serviceAccounts.actAs

iam.serviceAccounts.getAccessToken

logging.logEntries.create

logging.logEntries.route

serviceusage.services.use

storage.buckets.create

storage.buckets.delete

storage.buckets.get

storage.buckets.list

storage.buckets.update

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Firebase Remote Config Viewer

(roles/cloudconfig.viewer)

Read access to Firebase Remote Config resources.

cloudconfig.configs.get

firebase.clients.get

firebase.clients.list

firebase.projects.get

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Remote Config permissions

PermissionIncluded in roles

cloudconfig.configs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Remote Config Admin (roles/cloudconfig.admin)

Firebase Remote Config Viewer (roles/cloudconfig.viewer)

Firebase Admin (roles/firebase.admin)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Grow Viewer (roles/firebase.growthViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Support User (roles/iam.supportUser)

cloudconfig.configs.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Remote Config Admin (roles/cloudconfig.admin)

Firebase Admin (roles/firebase.admin)

Firebase Grow Admin (roles/firebase.growthAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.