Role-based access control for Fleet Management
Grafana Fleet Management supports role-based access control (RBAC). RBAC provides a way of granting and revoking access to viewing and modifying Fleet Management resources, such as collectors and configuration pipelines.
Note
Fleet Management RBAC includes one plugin role and does not offer fine-grained access at this time. Support for fine-grained RBAC is under active development.
Refer to the Grafana Cloud RBAC documentation to learn more about controlling access to Cloud with RBAC.
Collector App Admin role permissions
Granting a user the Collector App Admin role gives them full access to the Fleet Management plugin.
They can register, modify, assign, or delete collectors and configuration pipelines.
| Fleet Management role | Permissions | 
|---|---|
| Admin | Editor for all apps in the stack | 
| Collector App Admin | Editor for Fleet Management only | 
Assign the Collector App Admin role in the UI
To assign the role to an existing user or team, follow these steps:
- In your Grafana Cloud stack, click Administration > Users and access in the left-side menu.
- Click Users to find an individual or Teams to find a team.
- Search for the user or team.
- Click in the box in the Role column.
- Scroll through the list to reach the Fixed roles section.
- In the Data sources menu, select the checkbox for Writers.
- Continue scrolling through the list to reach the Plugin roles section.
- In the Collector menu, select the checkbox for Collector App Admin.
- Click Apply.
Note
The
plugins:grafana-collector-app:adminrole must be granted alongside thefixed:datasources:writerrole for the permissions to take effect.
After a browser refresh, the newly authorized user has editor access for Fleet Management.
If you want to assign the role to users not yet in your stack, you can add new users from your Grafana Cloud Portal on grafana.com.







