This page lists the IAM roles and permissions for Firestore. To search through all roles and permissions, see the role and permission index.
Firestore roles
| Role | Permissions | 
|---|---|
| Cloud Datastore Backup Schedules Admin( Manage backup schedules in Cloud Datastore. | 
       
 
 
 | 
| Cloud Datastore Backup Schedules Viewer( Read access to backup schedules in Cloud Datastore. | 
 
 | 
| Cloud Datastore Backups Admin( Read/Write access to metadata about backups in Cloud Datastore but restore is not allowed. | 
 
 
 | 
| Cloud Datastore Backups Viewer( Read access to metadata about backups in Cloud Datastore. | 
 
 | 
| Cloud Datastore Bulk Admin( Full access to manage bulk operations. | 
 
 
 
 
 
 
 | 
| Cloud Datastore Clone Admin( Clone Cloud Datastore Databases. | 
 
 
 
 
 
 | 
| Cloud Datastore Import Export Admin( Provides full access to manage imports and exports. Lowest-level resources where you can grant this role: 
 | 
 
 
 
 
 
 
 
 
 | 
| Cloud Datastore Index Admin( Provides full access to manage index definitions. Lowest-level resources where you can grant this role: 
 | 
 
 
       
 
 
 
 
 | 
| Cloud Datastore Key Visualizer Viewer( Full access to Key Visualizer scans. | 
 
       
 
 
 | 
| Cloud Datastore Owner( Provides full access to Datastore resources. Lowest-level resources where you can grant this role: 
 | 
 
       
 
       
 
       
 
 
 | 
| Cloud Datastore Restore Admin( Restore into Cloud Datastore Databases from Cloud Datastore Backups. | 
 
 
 
 
 
 
 
 | 
| Cloud Datastore User( Provides read/write access to data in a Datastore database. Lowest-level resources where you can grant this role: 
 | 
 
       
 
 
 
 
 
 
 
 
       
 
 
       
 
       
 
 
 | 
| Cloud Datastore User Creds Admin( Manage user creds in Cloud Datastore. | 
 
 
       
 | 
| Cloud Datastore User Creds Viewer( Read access to user creds in Cloud Datastore. | 
 
 | 
| Cloud Datastore Viewer( Provides read access to Datastore resources. Lowest-level resources where you can grant this role: 
 | 
 
       
 
 
 
 
 
 
 
 
 
 
       
 
       
 
 
 | 
| Firestore Service Agent( Gives Firestore service account access to managed resources. | 
 
 
 
 
 | 
Firestore permissions
| Permission | Included in roles | 
|---|---|
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Backup Schedules Viewer ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Backup Schedules Viewer ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Backups Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Backups Admin ( 
          Cloud Datastore Backups Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Viewer ( 
          Databases Admin ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Backups Admin ( 
          Cloud Datastore Backups Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Viewer ( 
          Databases Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Bulk Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Clone Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Clone Admin ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          DLP Organization Data Profiles Driver ( 
          DLP Project Data Profiles Driver ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Tag User ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          DLP Organization Data Profiles Driver ( 
          DLP Project Data Profiles Driver ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Tag User ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Import Export Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Firebase Rules System ( 
          Data Scientist ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Bulk Admin ( 
          Cloud Datastore Clone Admin ( 
          Cloud Datastore Import Export Admin ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Key Visualizer Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Cloud Datastore User ( 
          Cloud Datastore User Creds Admin ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Databases Admin ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Cloud Datastore Import Export Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Backup Schedules Admin ( 
          Cloud Datastore Clone Admin ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Cloud Datastore User ( 
          Cloud Datastore User Creds Admin ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Databases Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          DLP Organization Data Profiles Driver ( 
          DLP Project Data Profiles Driver ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Security Auditor ( 
          Support User ( 
          Tag User ( 
          Tag Viewer ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          DLP Organization Data Profiles Driver ( 
          DLP Project Data Profiles Driver ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Security Auditor ( 
          Support User ( 
          Tag User ( 
          Tag Viewer ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Rules System ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Rules System ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Rules System ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Firebase Rules System ( 
          Data Scientist ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Firebase Rules System ( 
          Data Scientist ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Rules System ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Databases Admin ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Databases Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Data Scientist ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Key Visualizer Viewer ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Key Visualizer Viewer ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Cloud Datastore Bulk Admin ( 
          Cloud Datastore Import Export Admin ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Cloud Datastore Owner ( 
          Firebase Admin ( 
          Firebase Develop Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Bulk Admin ( 
          Cloud Datastore Clone Admin ( 
          Cloud Datastore Import Export Admin ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Bulk Admin ( 
          Cloud Datastore Clone Admin ( 
          Cloud Datastore Import Export Admin ( 
          Cloud Datastore Index Admin ( 
          Cloud Datastore Owner ( 
          Cloud Datastore Restore Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User ( 
          Cloud Datastore Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Firebase Develop Viewer ( 
          Firebase Admin SDK Administrator Service Agent ( 
          Firebase Viewer ( 
          Data Scientist ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( Service agent roles 
 | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User Creds Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User Creds Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User Creds Admin ( 
          Cloud Datastore User Creds Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Viewer ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User Creds Admin ( 
          Cloud Datastore User Creds Viewer ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( 
          Security Admin ( 
          Security Auditor ( 
          Security Reviewer ( 
          Support User ( | 
| 
 | 
          Owner ( 
          Editor ( 
          Cloud Datastore Owner ( 
          Cloud Datastore User Creds Admin ( 
          Firebase Admin ( 
          Firebase Develop Admin ( 
          Databases Admin ( |