Firebase 产品类别预定义角色

这些角色会授予对各组产品的完整读写或只读权限。此类角色的结构是围绕着 Google Analytics 和一般产品类别设计的。

您可以使用 Firebase 控制台或 Google Cloud 控制台将这些产品类别角色分配给项目成员。

注意：如果您希望为项目成员提供更细化的预定义角色，可以分配产品级角色。

Firebase Analytics 角色

角色	说明	权限
Firebase Analytics 管理员 roles/firebase.analyticsAdmin	拥有以下产品的完整读写权限： Google Analytics	Firebase Analytics Admin 权限 firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebase.projects.list firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseextensions.configs.get firebaseextensions.configs.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list
Firebase Analytics 查看者 roles/firebase.analyticsViewer	拥有以下产品的只读权限： Google Analytics	Firebase Analytics Viewer 权限 firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebase.projects.list firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseextensions.configs.get firebaseextensions.configs.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list

Firebase Develop 角色

角色	说明	权限
Firebase Develop 管理员 roles/firebase.developAdmin	拥有以下产品的完整读写权限： Google Analytics Firebase App Check Firebase App Hosting Firebase Authentication Firebase Realtime Database Cloud Firestore Cloud Storage for Firebase Firebase Hosting Cloud Functions for Firebase （部署函数需要特殊配置） Firebase ML	Firebase Develop Admin 权限 apikeys.keys.get apikeys.keys.list apikeys.keys.lookup appengine.applications.get automl.* clientauthconfig.brands.get clientauthconfig.brands.list clientauthconfig.brands.update clientauthconfig.clients.get clientauthconfig.clients.list cloudfunctions.* datastore.* errorreporting.groups.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.* firebaseapphosting.* firebaseauth.* firebasedatabase.* firebaseextensions.configs.list firebasehosting.* firebaseinstallations.instances.delete firebaseml.* firebaserules.* logging.logEntries.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list runtimeconfig.* serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list storage.*
Firebase Develop Viewer roles/firebase.developViewer	拥有以下产品的只读权限： Google Analytics Firebase App Check Firebase App Hosting Firebase Authentication Firebase Realtime Database Cloud Firestore Cloud Storage for Firebase Firebase Hosting Cloud Functions for Firebase Firebase ML	Firebase Develop Viewer 权限 apikeys.keys.get apikeys.keys.list automl.*.get automl.*.list clientauthconfig.brands.get clientauthconfig.brands.list cloudfunctions.functions.get cloudfunctions.functions.list cloudfunctions.locations.list cloudfunctions.operations.get cloudfunctions.operations.list datastore.backups.get datastore.backups.list datastore.databases.get datastore.database.getMetadata datastore.databases.getIamPolicy datastore.databases.list datastore.entities.get datastore.entities.list datastore.indexes.get datastore.indexes.list datastore.namespaces.get datastore.namespaces.getIamPolicy datastore.namespaces.list datastore.statistics.get datastore.statistics.list errorreporting.groups.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappcheck.appAttestConfig.get firebaseappcheck.debugTokens.get firebaseappcheck.deviceCheckConfig.get firebaseappcheck.playIntegrityConfig.get firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaV3Config.get firebaseappcheck.safetyNetConfig.get firebaseappcheck.services.get firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get firebaseapphosting.traffic.list firebaseauth.configs.get firebaseauth.users.get firebasedatabase.instances.get firebasedatabase.instances.list firebaseextensions.configs.list firebasehosting.sites.get firebasehosting.sites.list firebaseml.compressionjobs.get firebaseml.compressionjobs.list firebaseml.models.get firebaseml.models.list firebaseml.modelversions.get firebaseml.modelversions.list firebaserules.releases.get firebaserules.releases.list firebaserules.rulesets.get firebaserules.rulesets.list logging.logEntries.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.objects.get storage.objects.getIamPolicy storage.objects.list

Firebase Quality 角色

角色	说明	权限
Firebase Quality 管理员 roles/firebase.qualityAdmin	拥有以下产品的完整读写权限： Google Analytics Firebase App Distribution Firebase Crashlytics Firebase Performance Monitoring	Firebase Quality Admin 权限 apikeys.keys.get apikeys.keys.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.* firebaseappdistro.* firebasecrash.* firebasecrashlytics.* firebaseextensions.configs.list firebaseperformance.* monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Firebase Quality 查看者 roles/firebase.qualityViewer	拥有以下产品的只读权限： Google Analytics Firebase App Distribution Firebase Crashlytics Firebase Performance Monitoring	Firebase Quality Viewer 权限 apikeys.keys.get apikeys.keys.list firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebaseappdistro.groups.list firebaseappdistro.releases.list firebaseappdistro.testers.list firebasecrash.reports.get firebasecrashlytics.config.get firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.sessions.get firebaseextensions.configs.list firebaseperformance.data.get monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list

注意：Firebase Quality 预定义角色不具有对 Test Lab 的访问权限。Test Lab 需要访问 Cloud Storage 存储桶，因此需要一组特定的权限，而标准 Firebase 预定义角色并未完全拥有这些权限。如需授予对 Test Lab 的访问权限，请使用 Firebase Test Lab 权限部分介绍的任一解决方案。

Firebase Grow 角色

角色	说明	权限
Firebase Grow 管理员 roles/firebase.growthAdmin	拥有以下产品的完整读写权限： Google Analytics Firebase A/B Testing Firebase Messaging 宣传活动 Firebase Cloud Messaging Firebase In-App Messaging Firebase Remote Config Firebase Dynamic Links	Firebase Grow Admin 权限 apikeys.keys.get apikeys.keys.list clientauthconfig.clients.get clientauthconfig.clients.list cloudconfig.* cloudmessaging.messages.create firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.* firebaseanalytics.resources.googleAnalyticsEdit firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebasedynamiclinks.* firebaseextensions.configs.list firebaseinappmessaging.* firebasemessagingcampaigns.* firebasenotifications.* monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Firebase Grow 查看者 roles/firebase.growthViewer	拥有以下产品的只读权限： Google Analytics Firebase A/B Testing Firebase Messaging 宣传活动 Firebase Cloud Messaging Firebase In-App Messaging Firebase Remote Config Firebase Dynamic Links	Firebase Grow Viewer 权限 apikeys.keys.get apikeys.keys.list cloudconfig.configs.get firebase.billingPlans.get firebase.clients.get firebase.clients.list firebase.links.list firebase.playLinks.get firebase.playLinks.list firebase.projects.get firebaseabt.experimentresults.get firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.projectmetadata.get firebaseanalytics.resources.googleAnalyticsReadAndAnalyze firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.destinations.list firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.stats.get firebaseextensions.configs.list firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebasenotifications.messages.get firebasenotifications.messages.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.operations.get serviceusage.operations.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list