Skip to content

diff firebase

Looks up every CMF user in the project with accounts:lookup, by their first email, else their first phone number, and reports anyone missing, plus any drift between CMF blocked and the account’s disabled flag, or between the email’s verified state and emailVerified. A user with neither an email nor a phone number can’t be looked up and is listed as no identifier.

Terminal window
iamigrate diff firebase --in users.cmf.jsonl.gz \
--project acme-prod --service-account ./service-account.json
FlagDescription
--inCMF users.cmf.jsonl.gz or uncompressed users.cmf.jsonl path; gzip is detected automatically (required)
--projectFirebase project ID (or $FIREBASE_PROJECT_ID; default: the service account’s project)
--service-accountService account key JSON path (or $GOOGLE_APPLICATION_CREDENTIALS)
--access-tokenOAuth2 access token (or $FIREBASE_ACCESS_TOKEN); exclusive with --service-account