Documentation Grafana Cloud AI and machine learning Grafana Assistant (Preview) RBAC

Configure RBAC permissions

Grafana Assistant access and functionality permissions are configurable through the Role-based access control (RBAC) function in Grafana Cloud. This page tells you how to configure Assistant access on an organizational level and control specific Assistant features like rules, Assistant Investigations, and MCP server management.

RBAC user-based roles

You can use RBAC permissions to control which users can access Grafana Assistant and use its features.

Basic organizational roles

The following basic roles provide access to Grafana Assistant functionality:

These permissions apply to Assistant functionality across your Grafana instance.

Assistant-specific roles

You can also assign Assistant-specific roles to grant access independently of a user’s basic role. This is useful when you want to grant individual access to users who don’t have an Editor or Admin basic role.

Configure Assistant access across Grafana

To grant a user permission to use Grafana Assistant with basic capabilities across your Grafana Cloud instance:

1. Sign in to Grafana as an organization administrator.
2. In the left navigation menu, click Administration > Users and access > Users.
3. Search for the user whose permissions you want to update.
4. In the Role field, assign the following role: Assistant > Assistant User.
5. Click Apply to save the changes.

Configure investigation access

To allow a user to access Assistant Investigations for advanced troubleshooting:

1. Sign in to Grafana as an organization administrator.
2. In the left navigation menu, click Administration > Users and access > Users.
3. Search for the user whose permissions you want to update.
4. In the Role field, assign the following role: Assistant > Assistant Investigation User.
5. Click Apply to save the changes.

Configure admin access

To grant a user administrative access to manage tenant-wide Assistant settings:

1. Sign in to Grafana as an organization administrator.
2. In the left navigation menu, click Administration > Users and access > Users.
3. Search for the user whose permissions you want to update.
4. In the Role field, assign the following role: Assistant > Assistant Admin.
5. Click Apply to save the changes.

RBAC permissions

Grafana Assistant supports the following RBAC permissions:

To perform specific Assistant actions, users must be granted multiple permissions across the Assistant app and plugin system.

The Assistant Admin role includes all permissions required to manage Assistant functionality. The Assistant MCP User role includes permissions for chat and personal MCP server management. The Assistant User role includes basic chat access and personal rule management.