Configure RBAC for Cost Management and Billing

Use role-based access control (RBAC) to manage permissions for users in the Cost Management and Billing App.

The following table shows the role names, descriptions, and associated actions that you can assign to users.

Role	Description	Associated actions
Full admin	Full access to all features	`grafana-cmab-app.billing-usage:read` `grafana-cmab-app.invoices:read` `grafana-cmab-app.focus:read` `grafana-cmab-app.costattribution:read` `grafana-cmab-app.costattribution:write` `grafana-cmab-app.usage-alerts:read` `grafana-cmab-app.usage-alerts:write`
Billing and usage reader	Read-only access to billing and usage data	`grafana-cmab-app.billing-usage:read`
Invoice reader	Read-only access to invoices	`grafana-cmab-app.invoices:read` `grafana-cmab-app.focus:read` `grafana-cmab-app.billing-usage:read`
Cost attribution admin	Full access to cost attribution	`grafana-cmab-app.costattribution:read` `grafana-cmab-app.costattribution:write` `grafana-cmab-app.billing-usage:read`
Cost attribution reader	Read-only access to cost attribution	`grafana-cmab-app.costattribution:read` `grafana-cmab-app.billing-usage:read`
Usage alerts admin	Full access to usage alerts	`grafana-cmab-app.usage-alerts:read` `grafana-cmab-app.usage-alerts:write` `grafana-cmab-app.billing-usage:read`
Usage alerts reader	Read-only access to usage alerts	`grafana-cmab-app.usage-alerts:read` `grafana-cmab-app.billing-usage:read`