0

How do we set up a role for Firebase console user that allows the user to create funnels and audiences (Project Editor role) for analytics data, while restricting access to BigQuery and Cloud Storage resources?

Mark Kang
  • 161
  • 11
  • This currently isn't possible: someone who has access to the Firebase console of your project has access to all products within there. While you can limit them to read-only permission, you can't limit them to certain products. Work is under way to change this situation, but as usual: no timelines or estimates. Note that BigQuery access is managed from the Cloud console, which (afaik) already supports such role based access. – Frank van Puffelen Mar 08 '18 at 13:10
  • Possible duplicate of [Assign specific role (Authentication) to a Firebase Console user](https://stackoverflow.com/questions/45585948/assign-specific-role-authentication-to-a-firebase-console-user) – Frank van Puffelen Mar 08 '18 at 13:12

1 Answers1

0

Firebase now provides two predifined roles related to Google Analytics reports, roles/firebase.analyticsAdmin and roles/firebase.analyticsViewer. This allows basic access control, but not any sort of per-report or restricted editor permissions.

Note that BigQuery can be managed by IAM permissions through Cloud.

Kato
  • 40,352
  • 6
  • 119
  • 149