Configure authentication and authorization

You can configure various methods to allow users to access your Grafana Cloud instance. To authorize requests to Grafana Cloud resources that do not involve users you can use Grafana Cloud Access Policies.

User authentication

Grafana Cloud uses OAuth 2.0 with Grafana.com as the default authentication provider. Additional authentication and authorization methods, such as LDAP, SAML, and OAuth, can also be configured for your Grafana Cloud instance. For detailed guidance, refer to the Grafana documentation on authentication.

User authorization

You can configure user roles either through the Cloud Portal or directly within your Grafana instance.

Using the Grafana Cloud Portal: Roles configured in the Grafana Cloud Portal will automatically propagate to your Grafana instances, ensuring consistent access control across your environments. To learn more about the specific capabilities assigned to each role, see User account roles and permissions.
Directly in your Grafana instance: If you prefer to configure roles within a specific Grafana instance, refer to the Grafana role-based access control documentation for detailed instructions.