Firebase Test Lab roles and permissions

This page lists the IAM roles and permissions for Firebase Test Lab. Tosearch through all roles and permissions, see therole andpermission index.

Firebase Test Lab roles

RolePermissions

Firebase Test Lab Direct Access AdminBeta

(roles/cloudtestservice.directAccessAdmin)

Administrator owning access to Direct Access

cloudtestservice.devicesession.*

  • cloudtestservice.devicesession.cancel
  • cloudtestservice.devicesession.create
  • cloudtestservice.devicesession.get
  • cloudtestservice.devicesession.list
  • cloudtestservice.devicesession.update
  • cloudtestservice.devicesession.use

cloudtestservice.environmentcatalog.get

devicestreaming.*

  • devicestreaming.deviceSessions.cancel
  • devicestreaming.deviceSessions.create
  • devicestreaming.deviceSessions.get
  • devicestreaming.deviceSessions.list
  • devicestreaming.deviceSessions.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Test Lab Direct Access ViewerBeta

(roles/cloudtestservice.directAccessViewer)

Viewer, able to see what direct access sessions exist

cloudtestservice.devicesession.get

cloudtestservice.devicesession.list

cloudtestservice.environmentcatalog.get

devicestreaming.deviceSessions.get

devicestreaming.deviceSessions.list

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Test Lab Admin

(roles/cloudtestservice.testAdmin)

Full access to all Test Lab features

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.*

  • cloudtestservice.matrices.create
  • cloudtestservice.matrices.get
  • cloudtestservice.matrices.update

cloudtoolresults.*

  • cloudtoolresults.executions.create
  • cloudtoolresults.executions.get
  • cloudtoolresults.executions.list
  • cloudtoolresults.executions.update
  • cloudtoolresults.histories.create
  • cloudtoolresults.histories.get
  • cloudtoolresults.histories.list
  • cloudtoolresults.settings.create
  • cloudtoolresults.settings.get
  • cloudtoolresults.settings.update
  • cloudtoolresults.steps.create
  • cloudtoolresults.steps.get
  • cloudtoolresults.steps.list
  • cloudtoolresults.steps.update

firebase.billingPlans.get

firebase.clients.get

firebase.clients.list

firebase.projects.get

resourcemanager.projects.get

resourcemanager.projects.list

storage.buckets.create

storage.buckets.get

storage.buckets.update

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

Firebase Test Lab Viewer

(roles/cloudtestservice.testViewer)

Read access to Test Lab features

cloudtestservice.environmentcatalog.get

cloudtestservice.matrices.get

cloudtoolresults.executions.get

cloudtoolresults.executions.list

cloudtoolresults.histories.get

cloudtoolresults.histories.list

cloudtoolresults.settings.get

cloudtoolresults.steps.get

cloudtoolresults.steps.list

firebase.clients.get

firebase.clients.list

firebase.projects.get

resourcemanager.projects.get

resourcemanager.projects.list

storage.objects.get

storage.objects.list

Firebase Test Lab permissions

PermissionIncluded in roles

cloudtestservice.devicesession.cancel

Owner (roles/owner)

Editor (roles/editor)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

cloudtestservice.devicesession.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

cloudtestservice.devicesession.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

Firebase Test Lab Direct Access Viewer (roles/cloudtestservice.directAccessViewer)

Support User (roles/iam.supportUser)

cloudtestservice.devicesession.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

Firebase Test Lab Direct Access Viewer (roles/cloudtestservice.directAccessViewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

cloudtestservice.devicesession.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

cloudtestservice.devicesession.use

Owner (roles/owner)

Editor (roles/editor)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

cloudtestservice.environmentcatalog.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Test Lab Direct Access Admin (roles/cloudtestservice.directAccessAdmin)

Firebase Test Lab Direct Access Viewer (roles/cloudtestservice.directAccessViewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Device Streaming Admin (roles/devicestreaming.admin)

Device Streaming Viewer (roles/devicestreaming.viewer)

Firebase Admin (roles/firebase.admin)

Firebase Viewer (roles/firebase.viewer)

Support User (roles/iam.supportUser)

cloudtestservice.matrices.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Admin (roles/firebase.admin)

cloudtestservice.matrices.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Test Lab Viewer (roles/cloudtestservice.testViewer)

Firebase Admin (roles/firebase.admin)

Firebase Viewer (roles/firebase.viewer)

Support User (roles/iam.supportUser)

cloudtestservice.matrices.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Test Lab Admin (roles/cloudtestservice.testAdmin)

Firebase Admin (roles/firebase.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.