Manage Firebase project access at scale
Skip the console grind. Manage user access across multiple projects with bulk invite and removal operations.
This tool is independently developed and is not affiliated with, endorsed by, or connected to Google or Firebase.
Preview the experience
Get a glimpse of the dashboard and job tracking before you connect your projects.
Simple pricing
Start now. Upgrade any time.
Pro Monthly
$29/mo
- Unlimited bulk invites
- Unlimited bulk deletes
- Unlimited custom roles
- Priority support
Pro Yearly
$290/yr
17% cheaper than monthly
- Same as Pro Monthly
- Save money
Frequently asked questions
How SparkConductor works, security, limits, and billing.
What does SparkConductor do?
It bulk‑manages IAM on your Firebase/GCP projects. You can invite a user to many projects with selected roles, or remove roles/the user across projects.
How does it work end‑to‑end?
You connect a Google account via OAuth, load your accessible projects, pick targets and roles, then submit a job. Our backend applies IAM updates via Google APIs and streams per-project results.
Which Google permissions are required?
Your connected account must be able to grant IAM on the target projects (e.g., roles like Project IAM Admin, IAM Security Admin, or Owner). We request scopes to list projects and manage IAM only.
What roles can I grant or remove?
Any role your account can grant, including Firebase roles (e.g., roles/firebase.admin, roles/firebase.viewer) and GCP roles (e.g., roles/serviceusage.serviceUsageAdmin). You can also input custom role IDs.
Do you store my Google tokens?
Access and refresh tokens are kept in secure HttpOnly cookies, not in the database. For each job, a short‑lived access token is encrypted server‑side to execute the job and is deleted on success.
What happens if access expires?
We refresh tokens automatically when possible. If refresh fails, we mark the job as missing_auth and prompt you to reconnect your Google account—no credentials are stored.
Will existing permissions be changed?
Invite jobs only add the roles you select to the specified user. Removal jobs either remove specific roles or remove the user from all roles, depending on the mode you choose.
Are there usage limits?
Yes. Free plan: up to 5 projects/job, 100/day, 100/month. Pro increases limits significantly. Google API rate limits also apply; large batches are processed safely.
How is billing handled?
Payments run through Creem. Start from the pricing page; you can manage your subscription anytime via the customer portal.
Do you keep job data?
We store minimal job metadata and per‑project results so you can audit outcomes. Invitation payloads aren’t persisted beyond execution.
Is this affiliated with Google or Firebase?
No—SparkConductor is independent and not affiliated with, endorsed by, or connected to Google or Firebase.