Firebase functions overly permissive admin sdk iam permissions
Flags instances where the Firebase Admin SDK is used within a function. Since the Admin SDK bypasses Firebase Security Rules and authenticates via the function's service account, overly broad IAM permissions (e.g., Project Editor role) on this service account can lead to extensive control over Firebase and Google Cloud resources if the function is compromised.