Grafana Cloud

Role-based access control for Fleet Management

Grafana Fleet Management supports role-based access control (RBAC). RBAC provides a way of granting and revoking access to viewing and modifying Fleet Management resources, such as collectors and configuration pipelines.

Note

Fleet Management RBAC includes one plugin role and does not offer fine-grained access at this time. Support for fine-grained RBAC is under active development.

Refer to the Grafana Cloud RBAC documentation to learn more about controlling access to Cloud with RBAC.

Collector App Admin role permissions

Granting a user the Collector App Admin role gives them full access to the Fleet Management plugin. They can register, modify, assign, or delete collectors and configuration pipelines.

Fleet Management rolePermissions
AdminEditor for all apps in the stack
Collector App AdminEditor for Fleet Management only

Assign the Collector App Admin role in the UI

To assign the role to an existing user or team, follow these steps:

  1. In your Grafana Cloud stack, click Administration > Users and access in the left-side menu.
  2. Click Users to find an individual or Teams to find a team.
  3. Search for the user or team.
  4. Click in the box in the Role column.
  5. Scroll through the list to reach the Fixed roles section.
  6. In the Data sources menu, select the checkbox for Writers.
  7. Continue scrolling through the list to reach the Plugin roles section.
  8. In the Collector menu, select the checkbox for Collector App Admin.
  9. Click Apply.

Note

The plugins:grafana-collector-app:admin role must be granted alongside the fixed:datasources:writer role for the permissions to take effect.

After a browser refresh, the newly authorized user has editor access for Fleet Management.

If you want to assign the role to users not yet in your stack, you can add new users from your Grafana Cloud Portal on grafana.com.