Roles and permissions
Who can do what in a FireOTA workspace.
Roles
- Owner — everything, including disconnecting Firebase projects and deleting the workspace.
- Admin — apps, channels, team, API keys, webhooks, deleting releases.
- Release manager — publish, pause, roll back, archive, change rollouts, read audit logs.
- Developer — create releases and upload bundles; cannot publish.
- Viewer — read-only.
Enforced on the server
Every action is checked on the server, so hiding a button is never the only protection. Every change is audited.