I am new to firebase and I have developed an app which can save documents. I want to assign a role to my team member who can view "Real-Time Data" but not the "Storage" as few files are confidential. The team mate should not have access to view storage files in firebase.
Can I do this by adding rules in firebase? If yes, how?
If I cannot do this, what is the alternate?
Within the Firebase console you can assign these broad roles to the collaborators on a project:
As you can see, Database and Storage are in the same role here, so you can't assign different permissions for them.
Luckily you can also define a custom role in the Cloud console, which allows you fine grained control over what a collaborator can do.
You'll want to read the documentation on granting, changing and revoking access in the Cloud documentation, and then build a role that has the necessary Firebase product-level predefined roles. Since you want the collaborator to only have access to Realtime Database, you'll need one of these:
Role: Firebase Realtime Database Admin
roles/firebasedatabase.adminDescription: Full read/write access to Realtime Database resources
Realtime Database Admin permissions:
firebasedatabase.instances.createfirebasedatabase.instances.getfirebasedatabase.instances.listfirebasedatabase.instances.updateRole: Firebase Realtime Database Viewer
roles/firebasedatabase.viewerDescription: Read-only access to Realtime Database resources
Realtime Database Viewer permissions:
firebasedatabase.instances.getfirebasedatabase.instances.list
