Grafana offers several options for grouping users. Each level has different tools for managing user accounts and different tasks that they can perform.
One of the most important user management tasks is assigning roles, which govern what permissions a user has. The correct permissions ensure that users have access to only the resources they need.
Refer to Fine-grained access Control in Grafana Enterprise to understand how you can manage users with fine-grained permissions.
The highest and broadest level of user group in Grafana is the server. Every user with an account in a Grafana instance is a member of the server group.
Grafana Server Admins are user accounts that have the Grafana Admin option set to Yes. They can manage individual user accounts and organizations on their server.
Server Admins can:
Organizations are groups of users on a server. Users can belong to one or more organizations, but each user must belong to at least one organization.
Data sources, plugins, and dashboards are associated with organizations. This means that you can have a server with two organizations, one with a Prometheus data source and another with an InfluxDB data source. Each organization has separate data and dashboards.
Members of organizations have permissions based on their role in the organization. For more information, refer to Organization roles.
Organization Admins are user accounts that are assigned the Admin role for an organization. They can manage their users and teams in their organization.
Organization Admins can:
Teams are groups of users within the same organization. Teams allow you to grant permissions for a group of users. They are most often used to manage permissions for folders and dashboards. Enterprise users can use them to apply data source permissions.
Teams are mostly managed by Organization Admins. However, if the Grafana server setting editors_can_admin is applied, then users who are assigned the Team Admin role can also manage teams in their organization and users assigned to their teams.
Team Admins can Manage teams.
Users are named accounts in Grafana with granted permissions to access resources throughout Grafana. All users can manage their own accounts to a limited extent.
Set up users and teams in our tutorial on how to Create users and teams.
Related Grafana resources
GrafanaCONline 2021 is coming June 7-17
Be the first to learn about exciting next-generation features in Grafana 8.0, be inspired by what community members are building, and attend expert-led sessions and workshops on Grafana, Prometheus, Loki logs, and more.
Unify your data with Grafana plugins: Splunk, MongoDB, Datadog, and more
Show how Grafana can be used to take data from multiple different sources and unify it, without disrupting the investments that are working today.
Demo: Getting started with Grafana Enterprise and observability
Join the Grafana Labs team for a 30-minute demo of how to get started with the Grafana Stack, so you can go from zero to observability in just a few minutes.