Firebase App Check roles and permissions

This page lists the IAM roles and permissions for Firebase App Check. Tosearch through all roles and permissions, see therole andpermission index.

Firebase App Check roles

RolePermissions

Firebase App Check Admin

(roles/firebaseappcheck.admin)

Full management of Firebase App Check.

firebaseappcheck.*

  • firebaseappcheck.appAttestConfig.get
  • firebaseappcheck.appAttestConfig.update
  • firebaseappcheck.appCheckTokens.verify
  • firebaseappcheck.automations.create
  • firebaseappcheck.automations.delete
  • firebaseappcheck.automations.get
  • firebaseappcheck.automations.list
  • firebaseappcheck.automations.resume
  • firebaseappcheck.automations.suspend
  • firebaseappcheck.automations.update
  • firebaseappcheck.debugTokens.get
  • firebaseappcheck.debugTokens.update
  • firebaseappcheck.deviceCheckConfig.get
  • firebaseappcheck.deviceCheckConfig.update
  • firebaseappcheck.playIntegrityConfig.get
  • firebaseappcheck.playIntegrityConfig.update
  • firebaseappcheck.recaptchaEnterpriseConfig.get
  • firebaseappcheck.recaptchaEnterpriseConfig.update
  • firebaseappcheck.recaptchaV3Config.get
  • firebaseappcheck.recaptchaV3Config.update
  • firebaseappcheck.resourcePolicies.get
  • firebaseappcheck.resourcePolicies.update
  • firebaseappcheck.safetyNetConfig.get
  • firebaseappcheck.safetyNetConfig.update
  • firebaseappcheck.services.get
  • firebaseappcheck.services.update

Firebase App Check Service Agent

(roles/firebaseappcheck.serviceAgent)

Grants Firebase App Check Service Account access to consumer app attestation resources, such as reCAPTCHA Enterprise and Play Integrity API.

recaptchaenterprise.assessments.*

  • recaptchaenterprise.assessments.annotate
  • recaptchaenterprise.assessments.create

serviceusage.services.use

Firebase App Check Token Verifier

(roles/firebaseappcheck.tokenVerifier)

Access to token verification capabilities for Firebase App Check.

firebaseappcheck.appCheckTokens.verify

Firebase App Check Viewer

(roles/firebaseappcheck.viewer)

Read-only access for Firebase App Check.

firebaseappcheck.appAttestConfig.get

firebaseappcheck.automations.get

firebaseappcheck.automations.list

firebaseappcheck.debugTokens.get

firebaseappcheck.deviceCheckConfig.get

firebaseappcheck.playIntegrityConfig.get

firebaseappcheck.recaptchaEnterpriseConfig.get

firebaseappcheck.recaptchaV3Config.get

firebaseappcheck.resourcePolicies.get

firebaseappcheck.safetyNetConfig.get

firebaseappcheck.services.get

Firebase App Check permissions

PermissionIncluded in roles

firebaseappcheck.appAttestConfig.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.appAttestConfig.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.appCheckTokens.verify

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Token Verifier (roles/firebaseappcheck.tokenVerifier)

firebaseappcheck.automations.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.automations.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.automations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.automations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebaseappcheck.automations.resume

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.automations.suspend

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.automations.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.debugTokens.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.debugTokens.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.deviceCheckConfig.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.deviceCheckConfig.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.playIntegrityConfig.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.playIntegrityConfig.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.recaptchaEnterpriseConfig.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.recaptchaEnterpriseConfig.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.recaptchaV3Config.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.recaptchaV3Config.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.resourcePolicies.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

OAuth Config Editor (roles/oauthconfig.editor)

OAuth Config Viewer (roles/oauthconfig.viewer)

firebaseappcheck.resourcePolicies.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

OAuth Config Editor (roles/oauthconfig.editor)

firebaseappcheck.safetyNetConfig.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.safetyNetConfig.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

firebaseappcheck.services.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Firebase App Check Viewer (roles/firebaseappcheck.viewer)

Support User (roles/iam.supportUser)

firebaseappcheck.services.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase App Check Admin (roles/firebaseappcheck.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.