Just mentioning ( I'm not sure from your question if you're aware of this or I'm misunderstanding something), Firebase is a suite of tools within GCP, and you can have Firebase things call GCP things within the same project and IAM framework without any issue.