These roles grant full read/write or read-only access to groups of products.
They are structured around Google Analytics and general product
categories.
Assign these product-category roles to project members using the
Firebase console
or the
Google Cloud console.
Note: If you want more granular predefined roles for your project members,
you can assign product-level roles.
Firebase Analytics roles
| Role |
Description |
Permissions |
Firebase Analytics Admin
roles/firebase.analyticsAdmin
|
Full read/write access to:
|
Firebase Analytics Admin
permissions
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebase.projects.list
firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebaseextensions.configs.get
firebaseextensions.configs.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
|
Firebase Analytics Viewer
roles/firebase.analyticsViewer
|
Read-only access to:
|
Firebase Analytics Viewer
permissions
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebase.projects.list
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebaseextensions.configs.get
firebaseextensions.configs.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
|
Firebase Develop roles
| Role |
Description |
Permissions |
Firebase Develop Admin
roles/firebase.developAdmin
|
Full read/write access to:
|
Firebase Develop Admin
permissions
apikeys.keys.get
apikeys.keys.list
apikeys.keys.lookup
appengine.applications.get
automl.*
clientauthconfig.brands.get
clientauthconfig.brands.list
clientauthconfig.brands.update
clientauthconfig.clients.get
clientauthconfig.clients.list
cloudfunctions.*
datastore.*
errorreporting.groups.list
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebaseappcheck.*
firebaseapphosting.*
firebaseauth.*
firebasedatabase.*
firebaseextensions.configs.list
firebasehosting.*
firebaseinstallations.instances.delete
firebaseml.*
firebaserules.*
logging.logEntries.list
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
runtimeconfig.*
serviceusage.operations.get
serviceusage.operations.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
storage.*
|
Firebase Develop Viewer
roles/firebase.developViewer
|
Read-only access to:
|
Firebase Develop Viewer
permissions
apikeys.keys.get
apikeys.keys.list
automl.*.get
automl.*.list
clientauthconfig.brands.get
clientauthconfig.brands.list
cloudfunctions.functions.get
cloudfunctions.functions.list
cloudfunctions.locations.list
cloudfunctions.operations.get
cloudfunctions.operations.list
datastore.backups.get
datastore.backups.list
datastore.databases.get
datastore.database.getMetadata
datastore.databases.getIamPolicy
datastore.databases.list
datastore.entities.get
datastore.entities.list
datastore.indexes.get
datastore.indexes.list
datastore.namespaces.get
datastore.namespaces.getIamPolicy
datastore.namespaces.list
datastore.statistics.get
datastore.statistics.list
errorreporting.groups.list
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebaseappcheck.appAttestConfig.get
firebaseappcheck.debugTokens.get
firebaseappcheck.deviceCheckConfig.get
firebaseappcheck.playIntegrityConfig.get
firebaseappcheck.recaptchaEnterpriseConfig.get
firebaseappcheck.recaptchaV3Config.get
firebaseappcheck.safetyNetConfig.get
firebaseappcheck.services.get
firebaseapphosting.backends.get
firebaseapphosting.backends.list
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.domains.get
firebaseapphosting.domains.list
firebaseapphosting.rollouts.get
firebaseapphosting.rollouts.list
firebaseapphosting.traffic.get
firebaseapphosting.traffic.list
firebaseauth.configs.get
firebaseauth.users.get
firebasedatabase.instances.get
firebasedatabase.instances.list
firebaseextensions.configs.list
firebasehosting.sites.get
firebasehosting.sites.list
firebaseml.compressionjobs.get
firebaseml.compressionjobs.list
firebaseml.models.get
firebaseml.models.list
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaserules.releases.get
firebaserules.releases.list
firebaserules.rulesets.get
firebaserules.rulesets.list
logging.logEntries.list
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.operations.get
serviceusage.operations.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
storage.buckets.get
storage.buckets.getIamPolicy
storage.buckets.list
storage.objects.get
storage.objects.getIamPolicy
storage.objects.list
|
Firebase Quality roles
| Role |
Description |
Permissions |
Firebase Quality Admin
roles/firebase.qualityAdmin
|
Full read/write access to:
|
Firebase Quality Admin
permissions
apikeys.keys.get
apikeys.keys.list
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebaseanalytics.*
firebaseappdistro.*
firebasecrash.*
firebasecrashlytics.*
firebaseextensions.configs.list
firebaseperformance.*
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.operations.get
serviceusage.operations.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
|
Firebase Quality Viewer
roles/firebase.qualityViewer
|
Read-only access to:
|
Firebase Quality Viewer
permissions
apikeys.keys.get
apikeys.keys.list
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebaseappdistro.groups.list
firebaseappdistro.releases.list
firebaseappdistro.testers.list
firebasecrash.reports.get
firebasecrashlytics.config.get
firebasecrashlytics.data.get
firebasecrashlytics.issues.get
firebasecrashlytics.issues.list
firebasecrashlytics.sessions.get
firebaseextensions.configs.list
firebaseperformance.data.get
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.operations.get
serviceusage.operations.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
|
Note: Access to
Test Lab is not included in the Firebase Quality predefined roles.
Test Lab requires access to
Cloud Storage buckets, so it requires a
very specific set of permissions that aren't all included in the standard
Firebase predefined roles. To
grant access to
Test Lab, use one of the solutions described in the
Firebase Test Lab
permissions section.
Firebase Grow roles
| Role |
Description |
Permissions |
Firebase Grow Admin
roles/firebase.growthAdmin
|
Full read/write access to:
|
Firebase Grow Admin
permissions
apikeys.keys.get
apikeys.keys.list
clientauthconfig.clients.get
clientauthconfig.clients.list
cloudconfig.*
cloudmessaging.messages.create
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebaseabt.*
firebaseanalytics.resources.googleAnalyticsEdit
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebasedynamiclinks.*
firebaseextensions.configs.list
firebaseinappmessaging.*
firebasemessagingcampaigns.*
firebasenotifications.*
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.operations.get
serviceusage.operations.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
|
Firebase Grow Viewer
roles/firebase.growthViewer
|
Read-only access to:
|
Firebase Grow Viewer
permissions
apikeys.keys.get
apikeys.keys.list
cloudconfig.configs.get
firebase.billingPlans.get
firebase.clients.get
firebase.clients.list
firebase.links.list
firebase.playLinks.get
firebase.playLinks.list
firebase.projects.get
firebaseabt.experimentresults.get
firebaseabt.experiments.get
firebaseabt.experiments.list
firebaseabt.projectmetadata.get
firebaseanalytics.resources.googleAnalyticsReadAndAnalyze
firebasedynamiclinks.domains.get
firebasedynamiclinks.domains.list
firebasedynamiclinks.destinations.list
firebasedynamiclinks.links.get
firebasedynamiclinks.links.list
firebasedynamiclinks.stats.get
firebaseextensions.configs.list
firebaseinappmessaging.campaigns.get
firebaseinappmessaging.campaigns.list
firebasemessagingcampaigns.campaigns.get
firebasemessagingcampaigns.campaigns.list
firebasenotifications.messages.get
firebasenotifications.messages.list
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.operations.get
serviceusage.operations.list
serviceusage.quotas.get
serviceusage.services.get
serviceusage.services.list
|
Send feedback
Last updated 2026-08-19 UTC.
Need to tell us more?
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-08-19 UTC."],[],[]]