Firebase Authentication roles and permissions

This page lists the IAM roles and permissions for Firebase Authentication. Tosearch through all roles and permissions, see therole andpermission index.

Firebase Authentication roles

RolePermissions

Firebase Authentication Admin

(roles/firebaseauth.admin)

Full read/write access to Firebase Authentication resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebaseauth.*

  • firebaseauth.configs.create
  • firebaseauth.configs.get
  • firebaseauth.configs.getHashConfig
  • firebaseauth.configs.getSecret
  • firebaseauth.configs.update
  • firebaseauth.users.create
  • firebaseauth.users.createSession
  • firebaseauth.users.delete
  • firebaseauth.users.get
  • firebaseauth.users.sendEmail
  • firebaseauth.users.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Authentication Viewer

(roles/firebaseauth.viewer)

Read-only access to Firebase Authentication resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebaseauth.configs.get

firebaseauth.users.get

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Authentication permissions

PermissionIncluded in roles

firebaseauth.configs.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebaseauth.configs.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Authentication Admin (roles/firebaseauth.admin)

Firebase Authentication Viewer (roles/firebaseauth.viewer)

Support User (roles/iam.supportUser)

Identity Platform Admin (roles/identityplatform.admin)

Identity Platform Viewer (roles/identityplatform.viewer)

Identity Toolkit Admin (roles/identitytoolkit.admin)

Identity Toolkit Viewer (roles/identitytoolkit.viewer)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebaseauth.configs.getHashConfig

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

firebaseauth.configs.getSecret

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

firebaseauth.configs.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebaseauth.users.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

firebaseauth.users.createSession

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

firebaseauth.users.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

firebaseauth.users.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Authentication Admin (roles/firebaseauth.admin)

Firebase Authentication Viewer (roles/firebaseauth.viewer)

Support User (roles/iam.supportUser)

Identity Platform Admin (roles/identityplatform.admin)

Identity Platform Viewer (roles/identityplatform.viewer)

Identity Toolkit Admin (roles/identitytoolkit.admin)

Identity Toolkit Viewer (roles/identitytoolkit.viewer)

firebaseauth.users.sendEmail

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

firebaseauth.users.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Authentication Admin (roles/firebaseauth.admin)

Identity Platform Admin (roles/identityplatform.admin)

Identity Toolkit Admin (roles/identitytoolkit.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.