DocumentationGrafana CloudWhat's new in Grafana CloudGrafana SLO Folder RBAC

Grafana SLO Folder RBAC

We’d like to announce that we have implemented a preliminary version of folder scoped SLO actions! Now, users that are Folder Editors on a specific folder, can create, update, and delete SLOs associated with those folders. They will continue to be able to view SLOs in other folders, but those SLOs cannot be editable by users who do not have Folder Editor access.

How To Implement - User who can Edit SLOs in a Particular Folder

1. As a Grafana organization administrator, ensure that the specific user has a Viewer Basic role and the SLO > SLO Writer role
2. In the left-side menu, click Dashboards and navigate to the Folder you want to add permissions for.
3. Click Folder Actions and select Manage permissions from the dropdown.
4. Click Add a permission and grant the specific user Folder Edit permissions.
5. This user should now be able to view, create, update, and delete SLOs restricted to that particular Folder.

How To Implement - User who can Edit SLOs in any Folder

1. As a Grafana organization administrator, ensure that the specific user has a Viewer Basic role and the SLO > SLO Writer role
2. For the specific user, grant them the additional role Folders > Writer
3. This user should now be able to view, create, update, and delete SLOs in any Folder.

NOTE: If you have any users or service account tokens configured with either Editor or Admin Basic roles, there is no change to their ability to create, update, and delete SLOs. No modifications are required for these users or service account tokens.

If you have users or service account tokens configured with the combination of Viewer + SLO Writer roles, changes are required. You must implement one of the above changes, otherwise the user will be unable to create, edit or delete any SLOs.

Click here to read more in our documentation.