Fine-grained access control
Note: Fine-grained access control is in beta, and you can expect changes in future releases.
Fine-grained access control provides a standardized way of granting, changing, and revoking access when it comes to viewing and modifying Grafana resources, such as users and reports. Fine-grained access control works alongside the current Grafana permissions, and it allows you granular control of users’ actions.
Fine-grained access control considers a) who has an access (
identity), and b) what they can do and on which Grafana resource (
You can grant, change, or revoke access to users (
identity). When an authenticated user tries to access a Grafana resource, the authorization system checks the required fine-grained permissions for the resource and determines whether or not the action is allowed. Refer to Fine-grained permissions for a complete list of available permissions.
To grant or revoke access to your users, create or remove built-in role assignments. For more information, refer to Built-in role assignments.
Resources with fine-grained permissions
Fine-grained access control is currently available for Reporting and Managing Users. To learn more about specific endpoints where you can use access control, refer to Permissions and to the relevant API guide:
Enable fine-grained access control
Enable in config file
[feature_toggles] # enable features, separated by spaces enable = accesscontrol
Enable with an environment variable
You can use
GF_FEATURE_TOGGLES_ENABLE = accesscontrol environment variable to override the config file configuration and enable fine-grained access control.
Refer to Configuring with environment variables for more information.
Verify if enabled
You can verify if fine-grained access control is enabled or not by sending an HTTP request to the Check endpoint.
Related Grafana resources
GrafanaCONline 2021 is coming June 7-17
Be the first to learn about exciting next-generation features in Grafana 8.0, be inspired by what community members are building, and attend expert-led sessions and workshops on Grafana, Prometheus, Loki logs, and more.
Unify your data with Grafana plugins: Splunk, MongoDB, Datadog, and more
Show how Grafana can be used to take data from multiple different sources and unify it, without disrupting the investments that are working today.
Demo: Getting started with Grafana Enterprise and observability
Join the Grafana Labs team for a 30-minute demo of how to get started with the Grafana Stack, so you can go from zero to observability in just a few minutes.