Documentation Grafana Cloud Alerts and IRM SLO Set up RBAC

Configure RBAC permissions

SLO creation and management permissions are configurable through the Role-based access control (RBAC) function in Grafana Cloud. This page tells you how to configure SLO access on an organizational level, or on a user level with folder permissions.

RBAC user-based roles

You can use RBAC permissions to control which users can view, create, edit, and delete SLOs.

Basic organizational roles

The following basic roles provide access to SLO functionality:

These permissions apply to all SLOs in your Grafana instance.

SLO-specific roles

You can also assign SLO-specific roles to grant access independently of a user’s basic role. This is useful when you want to grant individual access to users who don’t have an Editor or Admin basic role.

Configure SLO access across Grafana

To grant a user permission to view, create, update, and delete SLOs across your entire Grafana Cloud instance:

1. Sign in to Grafana as an organization administrator.
2. In the left navigation menu, click Administration > Users and access > Users.
3. Search for the user whose permissions you want to update.
4. In the Role field, assign the following roles: SLO > SLO Writer and Folders > Writer.
5. Click Apply to save the changes.

Configure SLO access within folders

You can manage access to individual SLOs using folder-level permissions.

To allow a user to view, create, update, or delete SLOs within a specific folder, assign appropriate roles and configure the folder’s permissions.

You can customize access for users, service accounts, teams, and roles. For more information, see the Grant folder permissions in the Grafana administration documentation.

To give a user view, create, update, and delete access for only the SLOs contained in a certain folder:

1. Sign in to Grafana as an organization administrator.
2. In the left-side menu, click Administration > Users and access > Users.
3. Search for the user whose permissions you want to edit.
4. Click the user’s role and, under the Plugins section of the drowpdown, click SLO > SLO Writer.
5. Click Apply to save the changes.
6. Next, go to the left-side menu and click Dashboards.
7. Choose the folder you want to add permissions for.
8. Click Folder actions and select Manage permissions from the dropdown.
9. Click Add a permission and grant the specific user Folder Edit permissions.
10. The user is now able to view, create, update, and delete SLOs restricted to the chosen Folder.

RBAC permissions

Grafana SLO supports the following RBAC permissions:

Permissions required for SLO actions

To perform specific SLO actions, users must be granted multiple permissions across the SLO app, folders, and plugin system. For most users, assigning an SLO role combined with folder permissions is the simplest approach.

Role summary