Skip to main content
Question

Unable to grant IAM permissions on Firebase project created via Google AI Studio


Templora2027
Forum|alt.badge.img

Hello Google Cloud Community,

I'm developing a web application using Firebase Authentication and Cloud Firestore. My original Firebase project is associated with Google AI Studio and is currently on the Starter tier.

I need to grant a service account from a separate Firebase project permission to access my original Firestore database securely.

However, I am encountering the following issues:

  1. When attempting to modify IAM permissions, Google Cloud displays: "Failed to update IAM policy. You do not have the required permissions."

  2. I cannot access certain service account settings because the iam.serviceAccounts.get permission is missing.

  3. My account does not appear to have the Owner or IAM Administrator role.

  4. I also encountered a RESOURCE_USAGE_RESTRICTION_VIOLATED error involving an organization policy.

My questions are:

  • How can I identify the administrator or owner who can grant IAM permissions on this project?

  • Are these restrictions related to the Google AI Studio Starter environment?

  • Is there an official way to obtain the necessary permissions without migrating my Firebase project?

  • Can an authorized administrator grant a separate service account the roles/datastore.user role on my existing project?

Important: I need to preserve all existing Firebase Authentication users and Firestore data.

Any guidance would be greatly appreciated.

Thank you!