Give it two roles
In Grant this service account access to project, tap Select a role, type the role name, pick it; tap Add another role for the second. Then Continue and Done.
| Where | Setting | Exact value | Why |
|---|---|---|---|
| Service account → Roles | Role 1 | Firebase Adminroles/firebase.admin | Register your apps in Firebase (this also makes Google create their sign-in clients), set up Firebase sign-in, deploy your apps' Firebase rules, read Firebase data for tests |
| Service account → Roles | Role 2 | Service Usage Adminroles/serviceusage.serviceUsageAdmin | Turn on the APIs an app needs. Firebase Admin alone cannot do this |
Nothing more. In particular not Owner or Editor. Fodide checks the roles and says if one is missing.