Firebase App Hosting roles and permissions

This page lists the IAM roles and permissions for Firebase App Hosting. Tosearch through all roles and permissions, see therole andpermission index.

Firebase App Hosting roles

Role Permissions

Role	Permissions
Firebase App Hosting Admin^Beta (`roles/firebaseapphosting.admin`) Full access to Firebase App Hosting API resources.	`firebaseapphosting.*` `firebaseapphosting.backends.create` `firebaseapphosting.backends.delete` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.backends.update` `firebaseapphosting.builds.create` `firebaseapphosting.builds.delete` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.builds.update` `firebaseapphosting.domains.create` `firebaseapphosting.domains.delete` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.domains.update` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.cancel` `firebaseapphosting.operations.delete` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.create` `firebaseapphosting.rollouts.delete` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.rollouts.update` `firebaseapphosting.traffic.get` `firebaseapphosting.traffic.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Firebase App Hosting Compute Runner^Beta (`roles/firebaseapphosting.computeRunner`) Contains the basic necessary permissions for building and running Apps on Firebase App Hosting. Gives access to get and update App Hosting builds, upload artifacts to Artifact Registry and Storage, write logs. Intended to be granted to the user-supplied App Hosting Compute service account.	`artifactregistry.aptartifacts.create` `artifactregistry.attachments.` `artifactregistry.attachments.create` `artifactregistry.attachments.delete` `artifactregistry.attachments.get` `artifactregistry.attachments.list` `artifactregistry.dockerimages.` `artifactregistry.dockerimages.get` `artifactregistry.dockerimages.list` `artifactregistry.files.download` `artifactregistry.files.get` `artifactregistry.files.list` `artifactregistry.files.update` `artifactregistry.files.upload` `artifactregistry.kfpartifacts.create` `artifactregistry.locations.` `artifactregistry.locations.get` `artifactregistry.locations.list` `artifactregistry.mavenartifacts.` `artifactregistry.mavenartifacts.get` `artifactregistry.mavenartifacts.list` `artifactregistry.npmpackages.` `artifactregistry.npmpackages.get` `artifactregistry.npmpackages.list` `artifactregistry.packages.get` `artifactregistry.packages.list` `artifactregistry.packages.update` `artifactregistry.projectsettings.get` `artifactregistry.pythonpackages.` `artifactregistry.pythonpackages.get` `artifactregistry.pythonpackages.list` `artifactregistry.repositories.createOnPush` `artifactregistry.repositories.downloadArtifacts` `artifactregistry.repositories.exportArtifacts` `artifactregistry.repositories.get` `artifactregistry.repositories.list` `artifactregistry.repositories.listEffectiveTags` `artifactregistry.repositories.listTagBindings` `artifactregistry.repositories.readViaVirtualRepository` `artifactregistry.repositories.uploadArtifacts` `artifactregistry.rules.get` `artifactregistry.rules.list` `artifactregistry.tags.create` `artifactregistry.tags.get` `artifactregistry.tags.list` `artifactregistry.tags.update` `artifactregistry.versions.get` `artifactregistry.versions.list` `artifactregistry.yumartifacts.create` `cloudtrace.traces.patch` `developerconnect.connections.get` `developerconnect.gitRepositoryLinks.fetchReadToken` `developerconnect.gitRepositoryLinks.get` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.builds.update` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.locations.` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.traffic.get` `logging.logEntries.create` `logging.logEntries.route` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `orgpolicy.policy.get` `resourcemanager.projects.get` `resourcemanager.projects.list` `storage.folders.` `storage.folders.create` `storage.folders.delete` `storage.folders.get` `storage.folders.list` `storage.folders.rename` `storage.managedFolders.create` `storage.managedFolders.delete` `storage.managedFolders.get` `storage.managedFolders.list` `storage.multipartUploads.` `storage.multipartUploads.abort` `storage.multipartUploads.create` `storage.multipartUploads.list` `storage.multipartUploads.listParts` `storage.objects.create` `storage.objects.createContext` `storage.objects.delete` `storage.objects.deleteContext` `storage.objects.get` `storage.objects.list` `storage.objects.move` `storage.objects.restore` `storage.objects.setRetention` `storage.objects.update` `storage.objects.updateContext` `telemetry.metrics.write` `telemetry.traces.write`
Firebase App Hosting Developer^Beta (`roles/firebaseapphosting.developer`) Grants read & update access to Firebase App Hosting backend, builds, and releases resources, plus permission to invoke the backend, but doesn't allow for new backends to be created.	`firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.backends.update` `firebaseapphosting.builds.` `firebaseapphosting.builds.create` `firebaseapphosting.builds.delete` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.builds.update` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.locations.` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.` `firebaseapphosting.operations.cancel` `firebaseapphosting.operations.delete` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.` `firebaseapphosting.rollouts.create` `firebaseapphosting.rollouts.delete` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.rollouts.update` `firebaseapphosting.traffic.*` `firebaseapphosting.traffic.get` `firebaseapphosting.traffic.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`) Gives Firebase App Hosting access to resource for Building & Deploying Backends. Warning: Do not grant service agent roles to any principals except service agents.	`artifactregistry.dockerimages.` `artifactregistry.dockerimages.get` `artifactregistry.dockerimages.list` `artifactregistry.repositories.create` `artifactregistry.repositories.delete` `artifactregistry.repositories.deleteArtifacts` `artifactregistry.repositories.downloadArtifacts` `artifactregistry.repositories.get` `artifactregistry.repositories.update` `cloudbuild.builds.create` `cloudbuild.builds.get` `cloudbuild.builds.update` `cloudbuild.connections.get` `cloudbuild.operations.get` `cloudbuild.repositories.accessReadToken` `cloudbuild.repositories.accessReadWriteToken` `cloudbuild.repositories.get` `developerconnect.connections.get` `developerconnect.gitRepositoryLinks.fetchReadToken` `developerconnect.gitRepositoryLinks.fetchReadWriteToken` `developerconnect.gitRepositoryLinks.get` `firebaseapphosting.backends.create` `firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.backends.update` `firebaseapphosting.builds.create` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.builds.update` `firebaseapphosting.operations.cancel` `firebaseapphosting.operations.get` `firebaseapphosting.rollouts.create` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.rollouts.update` `firebaseapphosting.traffic.` `firebaseapphosting.traffic.get` `firebaseapphosting.traffic.update` `iam.serviceAccounts.actAs` `run.operations.delete` `run.operations.get` `run.revisions.delete` `run.revisions.get` `run.routes.get` `run.routes.invoke` `run.services.create` `run.services.delete` `run.services.get` `run.services.update` `serviceusage.services.use`
Firebase App Hosting Viewer^Beta (`roles/firebaseapphosting.viewer`) Grants readonly access to Firebase App Hosting resources, but not permission to invoke the backend. Intended for auditors, PMs, ect. Includes minimal viewer permissions for Firebase Console.	`firebaseapphosting.backends.get` `firebaseapphosting.backends.list` `firebaseapphosting.builds.get` `firebaseapphosting.builds.list` `firebaseapphosting.domains.get` `firebaseapphosting.domains.list` `firebaseapphosting.locations.*` `firebaseapphosting.locations.get` `firebaseapphosting.locations.list` `firebaseapphosting.operations.get` `firebaseapphosting.operations.list` `firebaseapphosting.rollouts.get` `firebaseapphosting.rollouts.list` `firebaseapphosting.traffic.get` `resourcemanager.projects.get` `resourcemanager.projects.list`

Firebase App Hosting Admin^Beta

(roles/firebaseapphosting.admin)

Full access to Firebase App Hosting API resources.

firebaseapphosting.*

firebaseapphosting.backends.create
firebaseapphosting.backends.delete
firebaseapphosting.backends.get
firebaseapphosting.backends.list
firebaseapphosting.backends.update
firebaseapphosting.builds.create
firebaseapphosting.builds.delete
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.builds.update
firebaseapphosting.domains.create
firebaseapphosting.domains.delete
firebaseapphosting.domains.get
firebaseapphosting.domains.list
firebaseapphosting.domains.update
firebaseapphosting.locations.get
firebaseapphosting.locations.list
firebaseapphosting.operations.cancel
firebaseapphosting.operations.delete
firebaseapphosting.operations.get
firebaseapphosting.operations.list
firebaseapphosting.rollouts.create
firebaseapphosting.rollouts.delete
firebaseapphosting.rollouts.get
firebaseapphosting.rollouts.list
firebaseapphosting.rollouts.update
firebaseapphosting.traffic.get
firebaseapphosting.traffic.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase App Hosting Compute Runner^Beta

(roles/firebaseapphosting.computeRunner)

Contains the basic necessary permissions for building and running Apps on Firebase App Hosting. Gives access to get and update App Hosting builds, upload artifacts to Artifact Registry and Storage, write logs. Intended to be granted to the user-supplied App Hosting Compute service account.

artifactregistry.aptartifacts.create

artifactregistry.attachments.*

artifactregistry.attachments.create
artifactregistry.attachments.delete
artifactregistry.attachments.get
artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.dockerimages.get
artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.files.update

artifactregistry.files.upload

artifactregistry.kfpartifacts.create

artifactregistry.locations.*

artifactregistry.locations.get
artifactregistry.locations.list

artifactregistry.mavenartifacts.*

artifactregistry.mavenartifacts.get
artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

artifactregistry.npmpackages.get
artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.packages.update

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.pythonpackages.get
artifactregistry.pythonpackages.list

artifactregistry.repositories.createOnPush

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.exportArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.repositories.uploadArtifacts

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.create

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.tags.update

artifactregistry.versions.get

artifactregistry.versions.list

artifactregistry.yumartifacts.create

cloudtrace.traces.patch

developerconnect.connections.get

developerconnect.gitRepositoryLinks.fetchReadToken

developerconnect.gitRepositoryLinks.get

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.builds.update

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

firebaseapphosting.locations.get
firebaseapphosting.locations.list

firebaseapphosting.operations.get

firebaseapphosting.operations.list

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.traffic.get

logging.logEntries.create

logging.logEntries.route

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

orgpolicy.policy.get

resourcemanager.projects.get

resourcemanager.projects.list

storage.folders.*

storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename

storage.managedFolders.create

storage.managedFolders.delete

storage.managedFolders.get

storage.managedFolders.list

storage.multipartUploads.*

storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts

storage.objects.create

storage.objects.createContext

storage.objects.delete

storage.objects.deleteContext

storage.objects.get

storage.objects.list

storage.objects.move

storage.objects.restore

storage.objects.setRetention

storage.objects.update

storage.objects.updateContext

telemetry.metrics.write

telemetry.traces.write

Firebase App Hosting Developer^Beta

(roles/firebaseapphosting.developer)

Grants read & update access to Firebase App Hosting backend, builds, and releases resources, plus permission to invoke the backend, but doesn't allow for new backends to be created.

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.backends.update

firebaseapphosting.builds.*

firebaseapphosting.builds.create
firebaseapphosting.builds.delete
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.builds.update

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

firebaseapphosting.locations.get
firebaseapphosting.locations.list

firebaseapphosting.operations.*

firebaseapphosting.operations.cancel
firebaseapphosting.operations.delete
firebaseapphosting.operations.get
firebaseapphosting.operations.list

firebaseapphosting.rollouts.*

firebaseapphosting.rollouts.create
firebaseapphosting.rollouts.delete
firebaseapphosting.rollouts.get
firebaseapphosting.rollouts.list
firebaseapphosting.rollouts.update

firebaseapphosting.traffic.*

firebaseapphosting.traffic.get
firebaseapphosting.traffic.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase App Hosting Service Agent

(roles/firebaseapphosting.serviceAgent)

Gives Firebase App Hosting access to resource for Building & Deploying Backends.

Warning: Do not grant service agent roles to any principals except service agents.

artifactregistry.dockerimages.*

artifactregistry.dockerimages.get
artifactregistry.dockerimages.list

artifactregistry.repositories.create

artifactregistry.repositories.delete

artifactregistry.repositories.deleteArtifacts

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.update

cloudbuild.builds.create

cloudbuild.builds.get

cloudbuild.builds.update

cloudbuild.connections.get

cloudbuild.operations.get

cloudbuild.repositories.accessReadToken

cloudbuild.repositories.accessReadWriteToken

cloudbuild.repositories.get

developerconnect.connections.get

developerconnect.gitRepositoryLinks.fetchReadToken

developerconnect.gitRepositoryLinks.fetchReadWriteToken

developerconnect.gitRepositoryLinks.get

firebaseapphosting.backends.create

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.backends.update

firebaseapphosting.builds.create

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.builds.update

firebaseapphosting.operations.cancel

firebaseapphosting.operations.get

firebaseapphosting.rollouts.create

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.rollouts.update

firebaseapphosting.traffic.*

firebaseapphosting.traffic.get
firebaseapphosting.traffic.update

iam.serviceAccounts.actAs

run.operations.delete

run.operations.get

run.revisions.delete

run.revisions.get

run.routes.get

run.routes.invoke

run.services.create

run.services.delete

run.services.get

run.services.update

serviceusage.services.use

Firebase App Hosting Viewer^Beta

(roles/firebaseapphosting.viewer)

Grants readonly access to Firebase App Hosting resources, but not permission to invoke the backend. Intended for auditors, PMs, ect. Includes minimal viewer permissions for Firebase Console.

firebaseapphosting.backends.get

firebaseapphosting.backends.list

firebaseapphosting.builds.get

firebaseapphosting.builds.list

firebaseapphosting.domains.get

firebaseapphosting.domains.list

firebaseapphosting.locations.*

firebaseapphosting.locations.get
firebaseapphosting.locations.list

firebaseapphosting.operations.get

firebaseapphosting.operations.list

firebaseapphosting.rollouts.get

firebaseapphosting.rollouts.list

firebaseapphosting.traffic.get

resourcemanager.projects.get

resourcemanager.projects.list

Firebase App Hosting permissions

Permission	Included in roles
`firebaseapphosting.backends.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.backends.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`)
`firebaseapphosting.backends.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.backends.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.backends.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.builds.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.builds.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`)
`firebaseapphosting.builds.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.builds.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.builds.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.domains.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseapphosting.domains.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`)
`firebaseapphosting.domains.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseapphosting.domains.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseapphosting.domains.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Service Management Service Agent (`roles/firebase.managementServiceAgent`)
`firebaseapphosting.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`)
`firebaseapphosting.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`firebaseapphosting.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`)
`firebaseapphosting.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`firebaseapphosting.rollouts.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.rollouts.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`)
`firebaseapphosting.rollouts.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.rollouts.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.rollouts.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.traffic.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Compute Runner (`roles/firebaseapphosting.computeRunner`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Firebase App Hosting Viewer (`roles/firebaseapphosting.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)
`firebaseapphosting.traffic.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase App Hosting Admin (`roles/firebaseapphosting.admin`) Firebase App Hosting Developer (`roles/firebaseapphosting.developer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase App Hosting Service Agent (`roles/firebaseapphosting.serviceAgent`)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.

Movatterモバイル変換

Firebase App Hosting roles and permissions