ML Kit for Firebase roles and permissions

This page lists the IAM roles and permissions for ML Kit for Firebase. To search through all roles and permissions, see the role and permission index.

ML Kit for Firebase roles

Role Permissions

Role	Permissions
Firebase ML Kit Admin ^Beta (`roles/firebaseml.admin`) Full read/write access to Firebase ML Kit resources.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebaseml.*` `firebaseml.models.create` `firebaseml.models.delete` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.models.update` `firebaseml.modelversions.create` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `firebaseml.modelversions.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Firebase ML Kit Viewer ^Beta (`roles/firebaseml.viewer`) Read-only access to Firebase ML Kit resources.	`firebase.clients.get` `firebase.clients.list` `firebase.projects.get` `firebaseml.models.get` `firebaseml.models.list` `firebaseml.modelversions.get` `firebaseml.modelversions.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Firebase ML Kit Admin ^Beta

(roles/firebaseml.admin)

Full read/write access to Firebase ML Kit resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebaseml.*

firebaseml.models.create
firebaseml.models.delete
firebaseml.models.get
firebaseml.models.list
firebaseml.models.update
firebaseml.modelversions.create
firebaseml.modelversions.get
firebaseml.modelversions.list
firebaseml.modelversions.update

resourcemanager.projects.get

resourcemanager.projects.list

Firebase ML Kit Viewer ^Beta

(roles/firebaseml.viewer)

Read-only access to Firebase ML Kit resources.

firebase.clients.get

firebase.clients.list

firebase.projects.get

firebaseml.models.get

firebaseml.models.list

firebaseml.modelversions.get

firebaseml.modelversions.list

resourcemanager.projects.get

resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
Firebase AI Logic Service Agent (`roles/firebaseml.serviceAgent`) Access to Cloud ML and AI resources used by Firebase AI Logic Warning: Do not grant service agent roles to any principals except service agents.	`aiplatform.endpoints.predict` `logging.logEntries.create` `logging.logEntries.route` `serviceusage.services.use` `telemetry.traces.write`

Firebase AI Logic Service Agent

(roles/firebaseml.serviceAgent)

Access to Cloud ML and AI resources used by Firebase AI Logic

aiplatform.endpoints.predict

logging.logEntries.create

logging.logEntries.route

serviceusage.services.use

telemetry.traces.write

ML Kit for Firebase permissions

Permission	Included in roles
`firebaseml.models.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.models.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.models.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase Viewer (`roles/firebase.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.models.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase Viewer (`roles/firebase.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.models.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.modelversions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.modelversions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase Viewer (`roles/firebase.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.modelversions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase Viewer (`roles/firebase.viewer`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase ML Kit Viewer (`roles/firebaseml.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)
`firebaseml.modelversions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Firebase Admin (`roles/firebase.admin`) Firebase Editor (`roles/firebase.editor`) Firebase ML Kit Admin (`roles/firebaseml.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Firebase Admin SDK Administrator Service Agent (`roles/firebase.sdkAdminServiceAgent`)

ML Kit for Firebase roles and permissions