---
title: "Manage access to the Cost Management and Billing App | Grafana Cloud documentation"
description: "Configure RBAC for Cost Management and Billing"
---

# Configure RBAC for Cost Management and Billing

Use role-based access control (RBAC) to manage permissions for users in the Cost Management and Billing App.

The following table shows the role names, descriptions, and associated actions that you can assign to users.

Expand table

RoleDescriptionAssociated actions

Full adminFull access to all features

- `grafana-cmab-app.billing-usage:read`
- `grafana-cmab-app.invoices:read`
- `grafana-cmab-app.focus:read`
- `grafana-cmab-app.costattribution:read`
- `grafana-cmab-app.costattribution:write`
- `grafana-cmab-app.usage-alerts:read`
- `grafana-cmab-app.usage-alerts:write`

Billing and usage readerRead-only access to billing and usage data

- `grafana-cmab-app.billing-usage:read`

Invoice readerRead-only access to invoices

- `grafana-cmab-app.invoices:read`
- `grafana-cmab-app.focus:read`
- `grafana-cmab-app.billing-usage:read`

Cost attribution adminFull access to cost attribution

- `grafana-cmab-app.costattribution:read`
- `grafana-cmab-app.costattribution:write`
- `grafana-cmab-app.billing-usage:read`

Cost attribution readerRead-only access to cost attribution

- `grafana-cmab-app.costattribution:read`
- `grafana-cmab-app.billing-usage:read`

Usage alerts adminFull access to usage alerts

- `grafana-cmab-app.usage-alerts:read`
- `grafana-cmab-app.usage-alerts:write`
- `grafana-cmab-app.billing-usage:read`

Usage alerts readerRead-only access to usage alerts

- `grafana-cmab-app.usage-alerts:read`
- `grafana-cmab-app.billing-usage:read`

> Note
> 
> You can assign users to multiple roles.

## Assign users to a role

You can assign users to a role in the Grafana Cloud UI or using the HTTP API.

Refer to [Assign fixed roles in the UI using the role picker](/docs/grafana-cloud/security-and-account-management/authentication-and-permissions/access-control/assign-rbac-roles/#assign-fixed-roles-in-the-ui-using-the-role-picker) and [RBAC API](/docs/grafana-cloud/developer-resources/api-reference/http-api/access_control/) for more information.

# Configure Cloud Access Policies for Cost Management and Billing

Use Cloud Access Policies to [configure](/docs/grafana-cloud/cost-management-and-billing/set-up/focus-api-access/) API access

## Scopes

Expand table

ServiceDescriptionIdentifier

FOCUSRead-only access to FOCUS API

- `org-billing-focus:read`