Custom tokens

If your code is not running in a managed runtime in Google Cloud, you must either provide a service account JSON file or at very least the serviceAccountId app option.
serviceAccountId: '[email protected]',
When you got to Firebase service account under settings it gives you the IAM role for the account