# 7 tips on Firebase security rules and the Admin SDK

DevFeed: [7 tips on Firebase security rules and the Admin SDK](<https://devfeed.tech/articles/7-tips-on-firebase-security-rules-and-the-admin-sdk-16309.md>)

Original publisher: [Read original article](<https://firebase.blog/posts/2019/03/firebase-security-rules-admin-sdk-tips>)

Author: Hiranya Jayathilaka; Rachel Myers

Published: 2019-03-14T00:00:00Z

Content type: tutorial

Language: en

Sources: [Firebase Blog](<https://devfeed.tech/sources/firebase-blog.md>)

Topics: [Firebase](<https://devfeed.tech/topics/firebase.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [SDKs](<https://devfeed.tech/topics/sdks.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Firestore](<https://devfeed.tech/topics/firestore.md>), [Realtime Database](<https://devfeed.tech/topics/realtime-database.md>)

Tags: [admin-sdk](<https://devfeed.tech/tags/admin-sdk.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [cloud-functions](<https://devfeed.tech/tags/cloud-functions.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [firestore](<https://devfeed.tech/tags/firestore.md>), [realtime-database](<https://devfeed.tech/tags/realtime-database.md>), [security](<https://devfeed.tech/tags/security.md>), [security-rules](<https://devfeed.tech/tags/security-rules.md>)

## AI overview

This tutorial explains how Firebase security rules authorize and validate requests from client applications, and presents tips for using security rules with the Admin SDK. It highlights that Admin SDK requests bypass security rules and should therefore run only in trusted environments with appropriate administrative control.

## Source excerpt

News, tutorials, and updates from the Firebase team.