firebase apphosting:secrets:revokeaccess command
Introduced 2026-06-18 · score 0.92
HOW TO USE IT
When revoking a secret’s access for an App Hosting backend, run `firebase apphosting:secrets:revokeaccess` with the secret name and backend ID; add `--location` if needed to identify the backend’s region. The command changes secret permissions and does not edit deployment configuration.
firebase apphosting:secrets:revokeaccess <secret-name> --backend=<backend-id> [--location=<region>]WHY THIS HELPS
Revoke access to an App Hosting secret while maintaining a repository's deployment configuration.
REQUIREMENTS AND LIMITATIONS
- Version: v15.22.0
- <secretNames> (required): Secret name; comma-separate multiple secret names.
- --backend <backend> (required): Backend whose service-account access is revoked; mutually exclusive with `--emails`.
- --location <location>: Backend location. Cannot be combined with `--emails`; if omitted, the CLI prompts to select the backend location.
- --emails <emails>: Comma-delimited user or group emails to revoke access from; mutually exclusive with `--backend`.
- Prerequisite: Authenticate the Firebase CLI; the command also ensures the Secret Manager and App Hosting APIs are enabled.
- Prerequisite: The caller needs `secretmanager.secrets.get`, `secretmanager.secrets.getIamPolicy`, and `secretmanager.secrets.setIamPolicy` permissions.
- Prerequisite: Use firebase-tools v15.22.0 or later for this newly added command.
- Docs conflict: The Firebase CLI reference page lists `apphosting:secrets:grantaccess` and other App Hosting secret commands but omits `apphosting:secrets:revokeaccess`; v15.22.0 tagged source defines the new command. https://firebase.google.com/docs/cli
FIRST-PARTY EVIDENCE
- https://github.com/firebase/firebase-tools/releases/tag/v15.22.0
- https://github.com/firebase/firebase-tools/blob/v15.22.0/src/commands/apphosting-secrets-revokeaccess.ts
Check the installed version and the source before using it. Entry JSON