---
title: "RBAC configuration options in Grafana | Grafana documentation"
description: "Learn how to configure RBAC."
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

# Configure RBAC options in Grafana

> Note
> 
> Available in [Grafana Enterprise](/docs/grafana/next/introduction/grafana-enterprise/) and [Grafana Cloud](/docs/grafana-cloud/).

The table below describes the available RBAC configuration options for your Grafana stack. Like any other Grafana configuration, you can apply these options as [environment variables](/docs/grafana/next/setup-grafana/configure-grafana/#override-configuration-with-environment-variables).

Expand table

| Setting                         | Required | Description                                                                                                                                                                                                                                                                                                                     | Default |
|---------------------------------|----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------|
| `permission_cache`              | No       | Enable to use in memory cache for loading and evaluating users’ permissions.                                                                                                                                                                                                                                                    | `true`  |
| `permission_validation_enabled` | No       | Grafana enforces validation for permissions when a user creates or updates a role. The system checks the internal list of scopes and actions for each permission to determine they are valid. By default, if a scope or action is not recognized, Grafana logs a warning message. When set to `true`, Grafana returns an error. | `true`  |
| `reset_basic_roles`             | No       | Reset Grafana’s basic roles’ (Viewer, Editor, Admin, Grafana Admin) permissions to their default. Warning, if this configuration option is left to `true` this will be done on every reboot.                                                                                                                                    | `true`  |

## Example RBAC configuration

Bash ![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```bash
[rbac]

permission_cache = true
```