Firebase predefined roles
Stay organized with collections
Save and categorize content based on your preferences.
Firebase predefined roles are the curated Firebase-specific roles that
enable more granular access control than the basic roles (formerly called
"primitive" roles). You can assign more than one role to each project member.
By using predefined roles, you can grant different
access levels (Admin versus Viewer)
as well as breadth of access (individual products versus groups of products).
Firebase-level roles:
Roles which grant full read/write or read-only access to all the Firebase
products.
You can assign the Firebase-level roles using the
Firebase console.
Product-category roles:
Roles which grant full read/write or read-only access to groups of products.
They are structured around Google Analytics and general product
categories.
You can assign the Firebase product-category roles using the
Firebase console.
Product-level roles:
Roles which grant full read/write or read-only access to specific Firebase
products.
You can assign the Firebase product-level roles using the
Google Cloud console.
Note that, when needed, predefined roles automatically include permissions
which are:
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-08-27 UTC.
[null,null,["Last updated 2025-08-27 UTC."],[],[],null,["**Firebase predefined roles** are the curated Firebase-specific roles that\nenable more granular access control than the basic roles (formerly called\n\"primitive\" roles). You can assign more than one role to each project member.\n\nBy using predefined roles, you can grant different\n*access levels* (Admin versus Viewer)\nas well as *breadth of access* (individual products versus groups of products).\n\n- [**Firebase-level roles**](/docs/projects/iam/roles-predefined-all-products):\n Roles which grant full read/write or read-only access to *all* the Firebase\n products.\n\n You can assign the Firebase-level roles using the\n [Firebase console](//console.firebase.google.com/project/_/settings/iam).\n\n- [**Product-category roles**](/docs/projects/iam/roles-predefined-category):\n Roles which grant full read/write or read-only access to groups of products.\n They are structured around Google Analytics and general product\n categories.\n\n You can assign the Firebase product-category roles using the\n [Firebase console](//console.firebase.google.com/project/_/settings/iam).\n\n- [**Product-level roles**](/docs/projects/iam/roles-predefined-product):\n Roles which grant full read/write or read-only access to *specific* Firebase\n products.\n\n You can assign the Firebase product-level roles using the\n [Google Cloud console](//cloud.google.com/iam/docs/granting-changing-revoking-access).\n\nNote that, when needed, predefined roles automatically include permissions\nwhich are:\n\n- [Required to use any Firebase product or service.](/docs/projects/iam/permissions#required_all_roles)\n\n- [Required to perform some Firebase service-specific actions.](/docs/projects/iam/permissions#required_firebase_service)\n\n- [Required to perform some Firebase management-specific actions.](/docs/projects/iam/permissions#required_firebase_management)"]]