Important: This documentation is about an older version. It's relevant only to the release noted, many of the features and functions have been updated or replaced. Please view the current version.
Configure roles and permissions
A user is any individual who can log in to Grafana. Each user is associated with a role that includes permissions. Permissions determine the tasks a user can perform in the system. For example, the Admin role includes permissions for an administrator to create and delete users.
For more information, refer to Organization roles.
Manage access using roles
For Grafana OSS, there are three roles: Admin, Editor, and Viewer.
Details of the roles and the access they provide for Grafana Alerting are below.
Role | Access |
---|---|
Admin | Write access to alert rules, notification resources (notification API, contact points, templates, time intervals, notification policies, and silences), and provisioning. |
Editor | Write access to alert rules, notification resources (notification API, contact points, templates, time intervals, notification policies, and silences), and provisioning. |
Viewer | Read access to alert rules, notification resources (notification API, contact points, templates, time intervals, notification policies, and silences). |
Assign roles
To assign roles, admins need to complete the following steps.
- Navigate to Administration > Users and access > Users, Teams, or Service Accounts.
- Search for the user, team or service account you want to add a role for.
- Add the role you want to assign.
Manage access using folder permissions
You can extend the access provided by a role to alert rules and rule-specific silences by assigning permissions to individual folders.
This allows different users, teams, or service accounts to have customized access to modify or silence alert rules in specific folders.
Refer to the following table for details on the additional access provided by folder permissions:
Folder permission | Additional Access |
---|---|
View | No additional access: all permissions already contained in Viewer role. |
Edit | Write access to alert rules and their rule-specific silences only in the given folder and subfolders. |
Admin | Same additional access as Edit. |
Note
You can’t use folders to customize access to notification resources.
To manage folder permissions, complete the following steps.
- In the left-side menu, click Dashboards.
- Hover your mouse cursor over a folder and click Go to folder.
- Click Manage permissions from the Folder actions menu.
- Update or add permissions as required.