Google 會運用 AI 技術將內容翻譯成你偏好的語言，但可能會出錯。

Firebase 產品層級的預先定義角色

這些角色可授予特定 Firebase 產品的完整讀取/寫入或唯讀存取權。

使用 Google Cloud 控制台將這些角色指派給專案成員。

Firebase AI Logic 個角色

角色	說明	權限
Firebase AI Logic 管理員 `roles/firebasevertexai.admin`	具備 Firebase AI Logic資源的完整讀取/寫入權限	Firebase AI Logic管理員權限 firebasevertexai.configs.update firebasevertexai.configs.get
Firebase AI Logic 檢視者 `roles/firebasevertexai.viewer`	具備 Firebase AI Logic資源的唯讀權限	Firebase AI Logic 檢視者權限 firebasevertexai.configs.get

Firebase App Check 個角色

角色	說明	權限
Firebase App Check 管理員 `roles/firebaseappcheck.admin`	具備 App Check資源的完整讀取/寫入權限	App Check管理員權限 firebaseappcheck.appAttestConfig.get firebaseappcheck.appAttestConfig.update firebaseappcheck.appCheckTokens.verify firebaseappcheck.debugTokens.get firebaseappcheck.debugTokens.update firebaseappcheck.deviceCheckConfig.get firebaseappcheck.deviceCheckConfig.update firebaseappcheck.playIntegrityConfig.get firebaseappcheck.playIntegrityConfig.update firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaEnterpriseConfig.update firebaseappcheck.recaptchaV3Config.get firebaseappcheck.recaptchaV3Config.update firebaseappcheck.safetyNetConfig.get firebaseappcheck.safetyNetConfig.update firebaseappcheck.services.get firebaseappcheck.services.update
Firebase App Check 檢視者 `roles/firebaseappcheck.viewer`	具備 App Check資源的唯讀權限	App Check 檢視者權限 firebaseappcheck.appAttestConfig.get firebaseappcheck.debugTokens.get firebaseappcheck.deviceCheckConfig.get firebaseappcheck.playIntegrityConfig.get firebaseappcheck.recaptchaEnterpriseConfig.get firebaseappcheck.recaptchaV3Config.get firebaseappcheck.safetyNetConfig.get firebaseappcheck.services.get
Firebase App Check 權杖驗證器 `roles/firebaseappcheck.tokenVerifier`	可存取「App Check」的權杖驗證功能	App Check 權杖驗證器權限 firebaseappcheck.appCheckTokens.verify

Firebase App Distribution 個角色

角色	說明	權限
Firebase App Distribution 管理員 `roles/firebaseappdistro.admin`	具備 App Distribution資源的完整讀取/寫入權限	App Distribution管理員權限 firebaseappdistro.releases.list firebaseappdistro.releases.update firebaseappdistro.testers.list firebaseappdistro.testers.update firebaseappdistro.groups.list firebaseappdistro.groups.update
Firebase App Distribution 檢視者 `roles/firebaseappdistro.viewer`	具備 App Distribution資源的唯讀權限	App Distribution 檢視者權限 firebaseappdistro.releases.list firebaseappdistro.testers.list firebaseappdistro.groups.list

Firebase App Hosting 個角色

角色	說明	權限
Firebase App Hosting Compute Runner `roles/firebaseapphosting.computeRunner`	建構及執行 App Hosting 後端所需的最低存取權。通常會授予服務帳戶。	App Hosting Compute Runner 權限 firebaseapphosting.builds.update storage.objects.setRetention 以及下列角色包含的所有權限： firebaseapphosting.viewer artifactregistry.createOnPushWriter logging.logWriter cloudtrace.agent monitoring.metricWriter storage.objectUser developerconnect.readTokenAccessor
Firebase App Hosting 管理員 `roles/firebaseapphosting.admin`	具備 App Hosting資源的完整讀取/寫入權限	App Hosting 管理員權限 firebaseapphosting.backends.create firebaseapphosting.backends.delete firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.backends.update firebaseapphosting.builds.create firebaseapphosting.builds.delete firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.builds.update firebaseapphosting.domains.create firebaseapphosting.domains.delete firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.domains.update firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.cancel firebaseapphosting.operations.delete firebaseapphosting.operations.get firebaseapphosting.operations.list firebaseapphosting.rollouts.create firebaseapphosting.rollouts.delete firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.rollouts.update firebaseapphosting.traffic.get firebaseapphosting.traffic.list firebaseapphosting.traffic.update
Firebase App Hosting 檢視者 `roles/firebaseapphosting.viewer`	具備 App Hosting資源的唯讀權限	App Hosting 檢視者權限 firebaseapphosting.backends.get firebaseapphosting.backends.list firebaseapphosting.builds.get firebaseapphosting.builds.list firebaseapphosting.domains.get firebaseapphosting.domains.list firebaseapphosting.locations.get firebaseapphosting.locations.list firebaseapphosting.operations.list firebaseapphosting.operations.get firebaseapphosting.rollouts.get firebaseapphosting.rollouts.list firebaseapphosting.traffic.get firebaseapphosting.traffic.list
Firebase App Hosting 開發人員 `roles/firebaseapphosting.developer`	具備後端、建構和發布資源的完整讀取/寫入權限。 App Hosting	App Hosting開發人員權限 firebaseapphosting.backends.update firebaseapphosting.builds.create firebaseapphosting.builds.delete firebaseapphosting.builds.update firebaseapphosting.operations.delete firebaseapphosting.operations.cancel firebaseapphosting.rollouts.create firebaseapphosting.rollouts.delete firebaseapphosting.rollouts.update firebaseapphosting.traffic.update

Firebase Authentication 個角色

角色	說明	權限
Firebase Authentication 管理員 `roles/firebaseauth.admin`	具備 Authentication資源的完整讀取/寫入權限	Authentication管理員權限 firebaseauth.configs.create firebaseauth.configs.get firebaseauth.configs.getHashConfig firebaseauth.configs.getSecret firebaseauth.configs.update firebaseauth.users.create firebaseauth.users.createSession firebaseauth.users.delete firebaseauth.users.get firebaseauth.users.sendEmail firebaseauth.users.update
Firebase Authentication 檢視者 `roles/firebaseauth.viewer`	具備 Authentication資源的唯讀權限	Authentication 檢視者權限 firebaseauth.configs.get firebaseauth.users.get

Firebase A/B Testing 角色 (Beta 版)

角色	說明	權限
Firebase A/B Testing 管理員 `roles/firebaseabt.admin` (Beta 版)	具備 A/B Testing資源的完整讀取/寫入權限	A/B Testing管理員權限 firebaseabt.experimentresults.get firebaseabt.experiments.create firebaseabt.experiments.delete firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.experiments.update firebaseabt.projectmetadata.get
Firebase A/B Testing 檢視器 `roles/firebaseabt.viewer` (Beta 版)	具備 A/B Testing資源的唯讀權限	A/B Testing 檢視者權限 firebaseabt.experimentresults.get firebaseabt.experiments.get firebaseabt.experiments.list firebaseabt.projectmetadata.get

Cloud Firestore 個角色

如要查看可用的 Cloud Firestore 角色，請參閱Google Cloud 說明文件。

如要允許專案成員在 Firebase 控制台中編輯及發布安全性規則，或透過 Firebase CLI 部署安全性規則，您可以建立並指派包含 firebaserules.* 權限的自訂角色。

Cloud Storage 個角色

如要查看可用的 Cloud Storage 角色，請參閱Google Cloud 說明文件。

Cloud Functions for Firebase 個角色

如要查看可用的 Cloud Functions for Firebase 角色，請參閱Google Cloud 說明文件。

Firebase 通訊廣告活動角色

這些角色適用於 Firebase Cloud Messaging 和 Firebase In-App Messaging 的廣告活動。

角色	說明	權限
Firebase 通訊廣告活動管理員 `roles/firebasemessagingcampaigns.admin`	具備廣告活動資源的完整讀寫權限，適用於Cloud Messaging和In-App Messaging	Firebase 通訊廣告活動管理員權限 firebasemessagingcampaigns.campaigns.create firebasemessagingcampaigns.campaigns.delete firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list firebasemessagingcampaigns.campaigns.update firebasemessagingcampaigns.campaigns.start firebasemessagingcampaigns.campaigns.stop
Firebase 通訊廣告活動檢視者 `roles/firebasemessagingcampaigns.viewer`	具備 Cloud Messaging 和 In-App Messaging 的廣告活動資源唯讀存取權	Firebase 通訊廣告活動檢視者權限 firebasemessagingcampaigns.campaigns.get firebasemessagingcampaigns.campaigns.list

Firebase Cloud Messaging 個角色

除了 Firebase Cloud Messaging API 角色，您可能也需要指派適當的 Firebase 訊息廣告活動角色。

角色	說明	權限
Firebase Cloud Messaging API 管理員 `roles/firebasecloudmessaging.admin`	具備 Firebase Cloud Messaging API 資源的完整讀取/寫入權限。	Firebase Cloud Messaging API 管理員權限 cloudmessaging.messages.create fcmdata.deliverydata.list resourcemanager.projects.get resourcemanager.projects.list

角色	說明	權限
Firebase Cloud Messaging 管理員 `roles/firebasenotifications.admin`	具備 Cloud Messaging資源的完整讀取/寫入權限	Cloud Messaging管理員權限 firebasenotifications.messages.create firebasenotifications.messages.delete firebasenotifications.messages.get firebasenotifications.messages.list firebasenotifications.messages.update
Firebase Cloud Messaging 檢視者 `roles/firebasenotifications.viewer`	具備 Cloud Messaging資源的唯讀權限	Cloud Messaging 檢視者權限 firebasenotifications.messages.get firebasenotifications.messages.list

Firebase Crashlytics 個角色

角色	說明	權限
Firebase Crashlytics 管理員 `roles/firebasecrashlytics.admin`	具備 Crashlytics資源的完整讀取/寫入權限	Crashlytics管理員權限 firebasecrashlytics.config.get firebasecrashlytics.config.update firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.issues.update firebasecrashlytics.sessions.get
Firebase Crashlytics 檢視者 `roles/firebasecrashlytics.viewer`	具備 Crashlytics資源的唯讀權限	Crashlytics 檢視者權限 firebasecrashlytics.config.get firebasecrashlytics.data.get firebasecrashlytics.issues.get firebasecrashlytics.issues.list firebasecrashlytics.sessions.get

Firebase Hosting 個角色

角色	說明	權限
Firebase Hosting 管理員 `roles/firebasehosting.admin`	具備 Hosting資源的完整讀取/寫入權限	Hosting管理員權限 firebasehosting.sites.create firebasehosting.sites.delete firebasehosting.sites.get firebasehosting.sites.list firebasehosting.sites.update
Firebase Hosting 檢視者 `roles/firebasehosting.viewer`	具備 Hosting資源的唯讀權限	Hosting 檢視者權限 firebasehosting.sites.get firebasehosting.sites.list

。

Firebase In-App Messaging 角色 (Beta 版)

角色	說明	權限
Firebase In-App Messaging 管理員 `roles/firebaseinappmessaging.admin` (Beta 版)	具備 In-App Messaging資源的完整讀取/寫入權限	In-App Messaging管理員權限 firebaseinappmessaging.campaigns.create firebaseinappmessaging.campaigns.delete firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list firebaseinappmessaging.campaigns.update
Firebase In-App Messaging 檢視器 `roles/firebaseinappmessaging.viewer` (Beta 版)	具備 In-App Messaging資源的唯讀權限	In-App Messaging 檢視者權限 firebaseinappmessaging.campaigns.get firebaseinappmessaging.campaigns.list

Firebase Performance Monitoring 個角色

角色	說明	權限
Firebase Performance Monitoring 管理員 `roles/firebaseperformance.admin`	具備 Performance Monitoring資源的完整讀取/寫入權限設定及接收Performance Monitoring快訊	Performance Monitoring管理員權限 firebaseperformance.config.create firebaseperformance.config.delete firebaseperformance.config.update firebaseperformance.data.get
Firebase Performance Monitoring 檢視者 `roles/firebaseperformance.viewer`	具備 Performance Monitoring資源的唯讀權限	Performance Monitoring 檢視者權限 firebaseperformance.data.get

Firebase Realtime Database 個角色

角色	說明	權限
Firebase Realtime Database 管理員 `roles/firebasedatabase.admin`	具備 Realtime Database資源的完整讀取/寫入權限	Realtime Database管理員權限 firebasedatabase.instances.create firebasedatabase.instances.get firebasedatabase.instances.list firebasedatabase.instances.update
Firebase Realtime Database 檢視者 `roles/firebasedatabase.viewer`	具備 Realtime Database資源的唯讀權限	Realtime Database 檢視者權限 firebasedatabase.instances.get firebasedatabase.instances.list

Firebase Remote Config 個角色

角色	說明	權限
Firebase Remote Config 管理員 `roles/cloudconfig.admin`	具備 Remote Config資源的完整讀取/寫入權限	Remote Config管理員權限 cloudconfig.configs.get cloudconfig.configs.update
Firebase Remote Config 檢視者 `roles/cloudconfig.viewer`	具備 Remote Config資源的唯讀權限	Remote Config 檢視者權限 cloudconfig.configs.get

Firebase Test Lab 個角色

Firebase Test Lab 需要存取 Cloud Storage bucket，因此需要一組非常特定的權限，而標準的 Firebase 預先定義角色並未包含所有這些權限。如要授予 Test Lab 的存取權，請使用「Firebase Test Lab 權限」一節所述的其中一種解決方案。

已淘汰或不支援的產品

Firebase Dynamic Links 個角色

角色	說明	權限
Firebase Dynamic Links 管理員 `roles/firebasedynamiclinks.admin`	具備 Dynamic Links資源的完整讀取/寫入權限	Dynamic Links管理員權限 firebasedynamiclinks.destinations.list firebasedynamiclinks.destinations.update firebasedynamiclinks.domains.create firebasedynamiclinks.domains.delete firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.domains.update firebasedynamiclinks.links.create firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.links.update firebasedynamiclinks.stats.get
Firebase Dynamic Links 檢視者 `roles/firebasedynamiclinks.viewer`	具備 Dynamic Links資源的唯讀權限	Dynamic Links 檢視者權限 firebasedynamiclinks.destinations.list firebasedynamiclinks.domains.get firebasedynamiclinks.domains.list firebasedynamiclinks.links.get firebasedynamiclinks.links.list firebasedynamiclinks.stats.get

Firebase Extensions 個發布商角色

角色	說明	權限
Firebase Extensions 發布商 - 擴充功能管理員 `roles/firebaseextensionspublisher.extensionsAdmin` (Beta 版)	上傳、發布及查看 Firebase Extensions的詳細資料和指標	Firebase Extensions發布者 - 擴充功能管理員權限 firebaseextensionspublisher.extensions.create firebaseextensionspublisher.extensions.delete firebaseextensionspublisher.extensions.get firebaseextensionspublisher.extensions.list
Firebase Extensions 發布商 - 擴充功能檢視器 `roles/firebaseextensionspublisher.extensionsViewer` (Beta 版)	查看這位發布者上傳的 Firebase Extensions詳細資料和指標	Firebase Extensions 發布者 - 擴充功能檢視者權限 firebaseextensionspublisher.extensions.get firebaseextensionspublisher.extensions.list

Firebase ML 角色 (Beta 版)

角色	說明	權限
Firebase ML 管理員 `roles/firebaseml.admin` (Beta 版)	具備 Firebase ML資源的完整讀取/寫入權限	Firebase ML管理員權限 firebaseml.models.create firebaseml.models.get firebaseml.models.list firebaseml.models.update firebaseml.models.delete firebaseml.modelversions.create firebaseml.modelversions.get firebaseml.modelversions.list firebaseml.modelversions.update firebaseml.modelversions.delete firebaseml.compressionjobs.create firebaseml.compressionjobs.get firebaseml.compressionjobs.list firebaseml.compressionjobs.update firebaseml.compressionjobs.delete firebaseml.compressionjobs.start
Firebase ML 檢視器 `roles/firebaseml.viewer` (Beta 版)	具備 Firebase ML資源的唯讀權限	Firebase ML 檢視者權限 firebaseml.models.get firebaseml.models.list firebaseml.modelversions.get firebaseml.modelversions.list firebaseml.compressionjobs.get firebaseml.compressionjobs.list