Hello Google Cloud Community,
I'm developing a web application using Firebase Authentication and Cloud Firestore. My original Firebase project is associated with Google AI Studio and is currently on the Starter tier.
I need to grant a service account from a separate Firebase project permission to access my original Firestore database securely.
However, I am encountering the following issues:
-
When attempting to modify IAM permissions, Google Cloud displays: "Failed to update IAM policy. You do not have the required permissions."
-
I cannot access certain service account settings because the
iam.serviceAccounts.getpermission is missing. -
My account does not appear to have the Owner or IAM Administrator role.
-
I also encountered a
RESOURCE_USAGE_RESTRICTION_VIOLATEDerror involving an organization policy.
My questions are:
-
How can I identify the administrator or owner who can grant IAM permissions on this project?
-
Are these restrictions related to the Google AI Studio Starter environment?
-
Is there an official way to obtain the necessary permissions without migrating my Firebase project?
-
Can an authorized administrator grant a separate service account the
roles/datastore.userrole on my existing project?
Important: I need to preserve all existing Firebase Authentication users and Firestore data.
Any guidance would be greatly appreciated.
Thank you!
