Firebase Data Connect roles and permissions

This page lists the IAM roles and permissions for Firebase Data Connect. Tosearch through all roles and permissions, see therole andpermission index.

Firebase Data Connect roles

RolePermissions

Firebase Data Connect API AdminBeta

(roles/firebasedataconnect.admin)

Full access to Firebase Data Connect API resources, including data.

firebasedataconnect.*

  • firebasedataconnect.connectorRevisions.delete
  • firebasedataconnect.connectorRevisions.get
  • firebasedataconnect.connectorRevisions.list
  • firebasedataconnect.connectors.create
  • firebasedataconnect.connectors.delete
  • firebasedataconnect.connectors.get
  • firebasedataconnect.connectors.impersonateMutation
  • firebasedataconnect.connectors.impersonateQuery
  • firebasedataconnect.connectors.list
  • firebasedataconnect.connectors.update
  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list
  • firebasedataconnect.operations.cancel
  • firebasedataconnect.operations.delete
  • firebasedataconnect.operations.get
  • firebasedataconnect.operations.list
  • firebasedataconnect.schemaRevisions.delete
  • firebasedataconnect.schemaRevisions.get
  • firebasedataconnect.schemaRevisions.list
  • firebasedataconnect.schemas.create
  • firebasedataconnect.schemas.delete
  • firebasedataconnect.schemas.get
  • firebasedataconnect.schemas.list
  • firebasedataconnect.schemas.update
  • firebasedataconnect.services.create
  • firebasedataconnect.services.delete
  • firebasedataconnect.services.executeGraphql
  • firebasedataconnect.services.executeGraphqlRead
  • firebasedataconnect.services.get
  • firebasedataconnect.services.introspectGraphql
  • firebasedataconnect.services.list
  • firebasedataconnect.services.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Data Connect API Data AdminBeta

(roles/firebasedataconnect.dataAdmin)

Full access to data sources.

firebasedataconnect.connectors.impersonateMutation

firebasedataconnect.connectors.impersonateQuery

firebasedataconnect.services.executeGraphql

firebasedataconnect.services.executeGraphqlRead

firebasedataconnect.services.introspectGraphql

Firebase Data Connect API Data ViewerBeta

(roles/firebasedataconnect.dataViewer)

Readonly access to data sources.

firebasedataconnect.connectors.impersonateQuery

firebasedataconnect.services.executeGraphqlRead

firebasedataconnect.services.introspectGraphql

Firebase Data Connect Service Agent

(roles/firebasedataconnect.serviceAgent)

Gives Firebase Data Connect access to administer Cloud SQL instances.

Warning: Do not grant service agent roles to any principals exceptservice agents.

cloudsql.databases.create

cloudsql.databases.get

cloudsql.instances.connect

cloudsql.instances.get

cloudsql.instances.login

cloudsql.users.create

cloudsql.users.get

serviceusage.services.use

Firebase Data Connect API ViewerBeta

(roles/firebasedataconnect.viewer)

Readonly access to Firebase Data Connect API resources. This role does not grant any access to data.

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

  • firebasedataconnect.locations.get
  • firebasedataconnect.locations.list

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.introspectGraphql

firebasedataconnect.services.list

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Data Connect permissions

PermissionIncluded in roles

firebasedataconnect.connectorRevisions.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.connectorRevisions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

firebasedataconnect.connectorRevisions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebasedataconnect.connectors.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.connectors.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.connectors.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

firebasedataconnect.connectors.impersonateMutation

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)

firebasedataconnect.connectors.impersonateQuery

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)

Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer)

firebasedataconnect.connectors.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebasedataconnect.connectors.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.locations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebasedataconnect.locations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebasedataconnect.operations.cancel

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.operations.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.operations.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebasedataconnect.operations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebasedataconnect.schemaRevisions.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.schemaRevisions.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

firebasedataconnect.schemaRevisions.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebasedataconnect.schemas.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.schemas.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.schemas.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

firebasedataconnect.schemas.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebasedataconnect.schemas.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.services.create

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Service agent roles

Warning: Don't grant service agent roles to any principals exceptservice agents.

firebasedataconnect.services.delete

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

firebasedataconnect.services.executeGraphql

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)

firebasedataconnect.services.executeGraphqlRead

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)

Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer)

firebasedataconnect.services.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

firebasedataconnect.services.introspectGraphql

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Data Admin (roles/firebasedataconnect.dataAdmin)

Firebase Data Connect API Data Viewer (roles/firebasedataconnect.dataViewer)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Support User (roles/iam.supportUser)

firebasedataconnect.services.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Develop Viewer (roles/firebase.developViewer)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Viewer (roles/firebase.viewer)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Firebase Data Connect API Viewer (roles/firebasedataconnect.viewer)

Security Admin (roles/iam.securityAdmin)

Security Auditor (roles/iam.securityAuditor)

Security Reviewer (roles/iam.securityReviewer)

Support User (roles/iam.supportUser)

firebasedataconnect.services.update

Owner (roles/owner)

Editor (roles/editor)

Firebase Admin (roles/firebase.admin)

Firebase Develop Admin (roles/firebase.developAdmin)

Firebase Admin SDK Administrator Service Agent (roles/firebase.sdkAdminServiceAgent)

Firebase Data Connect API Admin (roles/firebasedataconnect.admin)

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-12-15 UTC.