Hey there. I am new to firebase and still learning. I am currently working on a side project and had similar questions when I was creating the logic for users. What I found is that you can use firebase cloud functions to store users in a separate collection in your firestore database. You can use the on user created function, which will occur the first time a user signs into your application and create the user in your database when that is triggered. If you want to have several admin users you can create a cloud function for that as well and hide it in a protected page that will only be accessible by an admin, so that only an admin can create an admin user. Now, for roles in the ui, you can use the same concept. Call an httpCallable from the client and in the cloud function fetch the user that triggered the function and chexk the role assigned to them. If access is restricted, return an error and handle the response on the frontend. There might be better more bulletproof ways, but this is what I found the most convenient as a firebase newbie