Firebase 產品層級的預先定義角色

這些角色可授予特定 Firebase 產品的完整讀取/寫入或唯讀存取權。

使用 Google Cloud 控制台為專案成員指派這些角色。

Firebase App Check 個角色

角色 說明 權限
Firebase App Check 管理員
roles/firebaseappcheck.admin 		具備
App Check資源的完整讀取/寫入權限
firebaseappcheck.appAttestConfig.get
firebaseappcheck.appAttestConfig.update
firebaseappcheck.appCheckTokens.verify
firebaseappcheck.debugTokens.get
firebaseappcheck.debugTokens.update
firebaseappcheck.deviceCheckConfig.get
firebaseappcheck.deviceCheckConfig.update
firebaseappcheck.playIntegrityConfig.get
firebaseappcheck.playIntegrityConfig.update
firebaseappcheck.recaptchaEnterpriseConfig.get
firebaseappcheck.recaptchaEnterpriseConfig.update
firebaseappcheck.recaptchaV3Config.get
firebaseappcheck.recaptchaV3Config.update
firebaseappcheck.safetyNetConfig.get
firebaseappcheck.safetyNetConfig.update
firebaseappcheck.services.get
firebaseappcheck.services.update
Firebase App Check 檢視者
roles/firebaseappcheck.viewer 		具備
App Check 資源的唯讀存取權
firebaseappcheck.appAttestConfig.get
firebaseappcheck.debugTokens.get
firebaseappcheck.deviceCheckConfig.get
firebaseappcheck.playIntegrityConfig.get
firebaseappcheck.recaptchaEnterpriseConfig.get
firebaseappcheck.recaptchaV3Config.get
firebaseappcheck.safetyNetConfig.get
firebaseappcheck.safetyNetConfig.get
Firebase App Check 權杖驗證器
roles/firebaseappcheck.tokenVerifier 		可存取 App Check 的權杖驗證功能
firebaseappcheck.appCheckTokens.verify

Firebase App Distribution 個角色

角色 說明 權限
Firebase App Distribution 管理員
roles/firebaseappdistro.admin
 具備
App Distribution 資源的完整讀取/寫入權限
firebaseappdistro.releases.list
firebaseappdistro.releases.update
firebaseappdistro.testers.list
firebaseappdistro.testers.update
firebaseappdistro.groups.list
firebaseappdistro.groups.update
Firebase App Distribution 檢視者
roles/firebaseappdistro.viewer
 具備
App Distribution資源的唯讀存取權
firebaseappdistro.releases.list
firebaseappdistro.testers.list
firebaseappdistro.groups.list

Firebase App Hosting 個角色

角色 說明 權限
Firebase App Hosting Compute 執行器
roles/firebaseapphosting.computeRunner
 建構及執行 App Hosting 後端所需的最低權限。通常會授予服務帳戶。
Firebase App Hosting 管理員
roles/firebaseapphosting.admin
 具備
App Hosting 資源的完整讀取/寫入權限
firebaseapphosting.backends.create
firebaseapphosting.backends.delete
firebaseapphosting.backends.get
firebaseapphosting.backends.list
firebaseapphosting.backends.update
firebaseapphosting.builds.create
firebaseapphosting.builds.delete
firebaseapphosting.builds.get
firebaseapphosting.builds.list
firebaseapphosting.builds.update
firebaseapphosting.domains.create
firebaseapphosting.domains.delete
firebaseapphosting.domains.get
firebaseapphosting.domains.list
firebaseapphosting.domains.update
firebaseapphosting.locations.get
firebaseapphosting.locations.list
firebaseapphosting.operations.cancel
firebaseapphosting.operations.delete
firebaseapphosting.operations.get
firebaseapphosting.operations.list
firebaseapphosting.rollouts.create
firebaseapphosting.rollouts.delete
firebaseapphosting.rollouts.get
firebaseapphosting.rollouts.list
firebaseapphosting.rollouts.update
firebaseapphosting.traffic.get
firebaseapphosting.traffic.list
firebaseapphosting.traffic.update
Firebase App Hosting Viewer
roles/firebaseapphosting.viewer
 具備
App Hosting 資源的唯讀存取權













Firebase App Hosting開發人員
roles/firebaseapphosting.developer
 具備
App Hosting 後端、建構作業和發布資源的完整讀取/寫入權限。
firebaseapphosting.backends.update
firebaseapphosting.builds.create
firebaseapphosting.builds.delete
firebaseapphosting.builds.update
firebaseapphosting.operations.delete
firebaseapphosting.operations.cancel
firebaseapphosting.rollouts.create
firebaseapphosting.rollouts.delete
firebaseapphosting.rollouts.update
firebaseapphosting.traffic.update

Firebase Authentication 個角色

角色 說明 權限
Firebase Authentication 管理員
roles/firebaseauth.admin 		具備
Authentication資源的完整讀取/寫入權限
firebaseauth.configs.create
firebaseauth.configs.get
firebaseauth.configs.getHashConfig
firebaseauth.configs.getSecret
firebaseauth.configs.update
firebaseauth.users.create
firebaseauth.users.createSession
firebaseauth.users.delete
firebaseauth.users.get
firebaseauth.users.sendEmail
firebaseauth.users.update
Firebase Authentication 檢視者
roles/firebaseauth.viewer 		具備
Authentication 資源的唯讀存取權
firebaseauth.configs.get
firebaseauth.users.get

Firebase A/B Testing 角色(Beta 版)

角色 說明 權限
Firebase A/B Testing 管理員
roles/firebaseabt.admin
(Beta 版) 		具備
A/B Testing資源的完整讀取/寫入權限
firebaseabt.experimentresults.get
firebaseabt.experiments.create
firebaseabt.experiments.delete
firebaseabt.experiments.get
firebaseabt.experiments.list
firebaseabt.experiments.update
firebaseabt.projectmetadata.get
Firebase A/B Testing 檢視者
roles/firebaseabt.viewer
(Beta 版) 		具備
A/B Testing 資源的唯讀存取權
firebaseabt.experimentresults.get
firebaseabt.experiments.get
firebaseabt.experiments.list
firebaseabt.projectmetadata.get

Cloud Firestore 個角色

請參閱 Google Cloud 說明文件，瞭解可用的 Cloud Firestore 角色。

如要允許專案成員在 Firebase 主控台中編輯及發布安全性規則，或透過 Firebase CLI 部署安全性規則，您可以建立並指派自訂角色，其中包含firebaserules.* 權限。

Cloud Storage 個角色

您可以在 Google Cloud 說明文件中找到可用的 Cloud Storage 角色。

如要允許專案成員在 Firebase 主控台中編輯及發布安全性規則，或透過 Firebase CLI 部署安全性規則，您可以建立並指派自訂角色，其中包含firebaserules.* 權限。

Cloud Functions for Firebase 個角色

您可以在 Google Cloud 說明文件中找到可用的 Cloud Functions for Firebase 角色。

Firebase 通訊廣告活動角色

這些角色適用於 Firebase Cloud Messaging 和 Firebase In-App Messaging 的廣告活動。

角色 說明 權限
Firebase 通訊廣告活動管理員
roles/firebasemessagingcampaigns.admin 		具備 Cloud Messaging 和 In-App Messaging
campaigns 資源的完整讀取/寫入權限
firebasemessagingcampaigns.campaigns.create
firebasemessagingcampaigns.campaigns.delete
firebasemessagingcampaigns.campaigns.get
firebasemessagingcampaigns.campaigns.list
firebasemessagingcampaigns.campaigns.update
firebasemessagingcampaigns.campaigns.start
firebasemessagingcampaigns.campaigns.stop
Firebase 訊息廣告活動檢視者
roles/firebasemessagingcampaigns.viewer 		具備 Cloud Messaging 和 In-App Messaging
campaigns 資源的唯讀存取權
firebasemessagingcampaigns.campaigns.get
firebasemessagingcampaigns.campaigns.list

Firebase Cloud Messaging 個角色

角色 說明 權限
Firebase Cloud Messaging 管理員
roles/firebasenotifications.admin 		具備
Cloud Messaging 資源的完整讀取/寫入權限
firebasenotifications.messages.create
firebasenotifications.messages.delete
firebasenotifications.messages.get
firebasenotifications.messages.list
firebasenotifications.messages.update
Firebase Cloud Messaging 檢視者
roles/firebasenotifications.viewer 		具備
Cloud Messaging 資源的唯讀存取權
firebasenotifications.messages.get
firebasenotifications.messages.list

Firebase Crashlytics 個角色

角色 說明 權限
Firebase Crashlytics 管理員
roles/firebasecrashlytics.admin 		具備
Crashlytics 資源的完整讀取/寫入權限
firebasecrashlytics.config.get
firebasecrashlytics.config.update
firebasecrashlytics.data.get
firebasecrashlytics.issues.get
firebasecrashlytics.issues.list
firebasecrashlytics.issues.update
firebasecrashlytics.sessions.get
Firebase Crashlytics 檢視者
roles/firebasecrashlytics.viewer 		具備
Crashlytics 資源的唯讀存取權
firebasecrashlytics.config.get
firebasecrashlytics.data.get
firebasecrashlytics.issues.get
firebasecrashlytics.issues.list
firebasecrashlytics.sessions.get
角色 說明 權限
Firebase Dynamic Links 管理員
roles/firebasedynamiclinks.admin 		具備
Dynamic Links 資源的完整讀取/寫入權限
firebasedynamiclinks.destinations.list
firebasedynamiclinks.destinations.update
firebasedynamiclinks.domains.create
firebasedynamiclinks.domains.delete
firebasedynamiclinks.domains.get
firebasedynamiclinks.domains.list
firebasedynamiclinks.domains.update
firebasedynamiclinks.links.create
firebasedynamiclinks.links.get
firebasedynamiclinks.links.list
firebasedynamiclinks.links.update
firebasedynamiclinks.stats.get
Firebase Dynamic Links 檢視者
roles/firebasedynamiclinks.viewer 		具備
Dynamic Links資源的唯讀存取權
firebasedynamiclinks.destinations.list
firebasedynamiclinks.domains.get
firebasedynamiclinks.domains.list
firebasedynamiclinks.links.get
firebasedynamiclinks.links.list
firebasedynamiclinks.stats.get

Firebase Extensions 發布商角色

角色 說明 權限
Firebase Extensions 發布商 - 擴充功能管理員
roles/firebaseextensionspublisher.extensionsAdmin
(Beta 版) 		上傳、發布及查看以下項目的詳細資料和指標：
Firebase Extensions
firebaseextensionspublisher.extensions.create
firebaseextensionspublisher.extensions.delete
firebaseextensionspublisher.extensions.get
firebaseextensionspublisher.extensions.list
Firebase Extensions發布商 - 擴充功能檢視器
roles/firebaseextensionspublisher.extensionsViewer
(Beta 版) 		查看由這位發布商上傳的
Firebase Extensions 詳細資料和指標
firebaseextensionspublisher.extensions.get
firebaseextensionspublisher.extensions.list

Firebase Hosting 個角色

角色 說明 權限
Firebase Hosting 管理員
roles/firebasehosting.admin 		具備
Hosting 資源的完整讀取/寫入權限
firebasehosting.sites.create
firebasehosting.sites.delete
firebasehosting.sites.get
firebasehosting.sites.list
firebasehosting.sites.update
Firebase Hosting 檢視者
roles/firebasehosting.viewer 		具備
Hosting 資源的唯讀存取權
firebasehosting.sites.get
firebasehosting.sites.list

Firebase In-App Messaging 角色(Beta 版)

角色 說明 權限
Firebase In-App Messaging 管理員
roles/firebaseinappmessaging.admin
(Beta 版) 		具備
In-App Messaging 資源的完整讀取/寫入權限
firebaseinappmessaging.campaigns.create
firebaseinappmessaging.campaigns.delete
firebaseinappmessaging.campaigns.get
firebaseinappmessaging.campaigns.list
firebaseinappmessaging.campaigns.update
Firebase In-App Messaging Viewer
roles/firebaseinappmessaging.viewer
(Beta 版) 		具備
In-App Messaging 資源的唯讀存取權
firebaseinappmessaging.campaigns.get
firebaseinappmessaging.campaigns.list

Firebase ML 角色(Beta 版)

角色 說明 權限
Firebase ML 管理員
roles/firebaseml.admin
(Beta 版) 		具備
Firebase ML 資源的完整讀取/寫入權限
firebaseml.models.create
firebaseml.models.get
firebaseml.models.list
firebaseml.models.update
firebaseml.models.delete
firebaseml.modelversions.create
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaseml.modelversions.update
firebaseml.modelversions.delete
firebaseml.compressionjobs.create
firebaseml.compressionjobs.get
firebaseml.compressionjobs.list
firebaseml.compressionjobs.update
firebaseml.compressionjobs.delete
firebaseml.compressionjobs.start
Firebase ML Viewer
roles/firebaseml.viewer
(Beta 版) 		具備
Firebase ML 資源的唯讀存取權
firebaseml.models.get
firebaseml.models.list
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaseml.compressionjobs.get
firebaseml.compressionjobs.list

Firebase Performance Monitoring 個角色

角色 說明 權限
Firebase Performance Monitoring 管理員
roles/firebaseperformance.admin 		具備
Performance Monitoring 資源的完整讀取/寫入權限

設定並接收 Performance Monitoring 快訊
firebaseperformance.config.create
firebaseperformance.config.delete
firebaseperformance.config.update
firebaseperformance.data.get
Firebase Performance Monitoring 檢視者
roles/firebaseperformance.viewer 		具備
Performance Monitoring 資源的唯讀存取權
firebaseperformance.data.get

Firebase Realtime Database 個角色

角色 說明 權限
Firebase Realtime Database 管理員
roles/firebasedatabase.admin 		具備
Realtime Database 資源的完整讀取/寫入權限
firebasedatabase.instances.create
firebasedatabase.instances.get
firebasedatabase.instances.list
firebasedatabase.instances.update
Firebase Realtime Database 檢視者
roles/firebasedatabase.viewer 		具備
Realtime Database 資源的唯讀存取權
firebasedatabase.instances.get
firebasedatabase.instances.list

Firebase Remote Config 個角色

角色 說明 權限
Firebase Remote Config 管理員
roles/cloudconfig.admin 		具備
Remote Config 資源的完整讀取/寫入權限
cloudconfig.configs.get cloudconfig.configs.update
Firebase Remote Config 檢視者
roles/cloudconfig.viewer 		具備
Remote Config 資源的唯讀存取權
cloudconfig.configs.get

Firebase Test Lab 個角色

Firebase Test Lab 需要存取 Cloud Storage 儲存桶，因此需要一組非常特定的權限，而這些權限並非全部包含在標準 Firebase 預先定義角色中。如要授予 Test Lab 的存取權，請使用 Firebase Test Lab 權限一節中所述的其中一種解決方案。