firebase blaze firestore role

Question

I have a blaze account on firestore. I'm trying to create a new firestore database and get this message: "To manage Cloud Firestore, ask a project owner for the necessary permissions"

My roles:

• Cloud Storage for Firebase Admin,
• Firebase Admin
• Firebase Analytics Admin
• Firebase Develop Admin
• Firebase Rules System

What else should I have?

I'm attaching to 2 images:

firestore page

IAM - my roles

Thank you, Geanni

Answer 1

The roles you've listed give you read/write access to the various Firebase services, but not the ability to add and remove them entirely from a project - that permission comes from Google Cloud itself.

The basic IAM roles define an Owner role that contains the needed permissions, but this is probably not what you are looking for.

At a more fine-tuned level, you should be able to use roles/datastore.owner to grant the ability to provision a Firestore database (Firestore is a layer on top of Datastore). That should be all you would need, but you might also need to consider roles/appengine.appAdmin too.

Relevant links:

• Datastore IAM permissions
• Firebase documentation on IAM permissions.

Answer 2

As documented here, you need the follow role:

Firebase Develop Admin - roles/firebase.developAdmin