Firebase Realtime Database roles and permissions

This page lists the IAM roles and permissions for Firebase Realtime Database. Tosearch through all roles and permissions, see therole andpermission index.

Firebase Realtime Database roles

RolePermissions

Firebase Realtime Database Admin

(roles/firebasedatabase.admin)

Full read/write access to Firebase Realtime Database resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebasedatabase.*

  • firebasedatabase.instances.create
  • firebasedatabase.instances.delete
  • firebasedatabase.instances.disable
  • firebasedatabase.instances.get
  • firebasedatabase.instances.list
  • firebasedatabase.instances.reenable
  • firebasedatabase.instances.undelete
  • firebasedatabase.instances.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Realtime Database Service Agent

(roles/firebasedatabase.serviceAgent)

Access to publish triggers

Warning: Do not grant service agent roles to any principals exceptservice agents.

pubsub.topics.publish

serviceusage.services.use

Firebase Realtime Database Viewer

(roles/firebasedatabase.viewer)

Read-only access to Firebase Realtime Database resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebasedatabase.instances.get

firebasedatabase.instances.list

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Realtime Database permissions

PermissionIncluded in roles

firebasedatabase.instances.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

firebasedatabase.instances.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

firebasedatabase.instances.disable

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

firebasedatabase.instances.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Firebase Realtime Database Viewer (roles/firebasedatabase.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebasedatabase.instances.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Firebase Realtime Database Viewer (roles/firebasedatabase.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebasedatabase.instances.reenable

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

firebasedatabase.instances.undelete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

firebasedatabase.instances.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Realtime Database Admin (roles/firebasedatabase.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.