Documentation Grafana Cloud Testing and synthetics Synthetic Monitoring Manage users and teams

Manage users and teams for Synthetic Monitoring

Depending on the size of your team or organization, you might reach a point where you have a large number of checks, and you want to control who gets access to the information they need. Grafana provides two ways to manage user access: basic role authorization, and role-based access control (RBAC).

You can use both mechanisms to give users in your organization the access they need to view, edit, and manage resources in Synthetic Monitoring.

Before you begin

• Ensure you have organization administrator privileges.

  Note

  User roles and teams are managed at the organization level of your Grafana instance. They can’t be configured via the Synthetic Monitoring application. For more details, refer to Manage users in an organization.

User roles and permissions

There are two ways to manage user roles and permissions for Synthetic Monitoring.

Basic role authorization

By default, authorization within Synthetic Monitoring relies on the basic user roles configured at the organization level. All users are assigned a basic role by the organization administrator. There are three available roles: Viewer, Editor, and Admin.

Role-based access control (RBAC)

RBAC for Grafana plugins provides fine-grained access control, allowing you to define custom roles and actions for users in Synthetic Monitoring. You can use RBAC to grant specific permissions without modifying the user’s basic role at the organization level. Additionally, you can fine-tune basic roles to add or remove specific Synthetic Monitoring RBAC roles.

For example, a user with the basic Viewer role at the organization level may need to edit checks. By assigning the Checks Writer role from Grafana Synthetic Monitoring’s RBAC, you can allow the user to view everything in Synthetic Monitoring, as well as allow them to edit checks.

To learn more about how RBAC works in Grafana, refer to Role-based access control (RBAC).

Synthetic Monitoring RBAC roles

The following table provides details about the available Synthetic Monitoring roles and the actions each role grants to users or teams.

In order to get access to the Synthetic Monitoring datasource and use the plugin, the datasources:read permission must be assigned when No basic role is set. Some other roles may require additional permissions that are external to Synthetic Monitoring. In such scenarios, the required permission will be explicitly detailed.

For details on how to assign roles to a user or team, refer to Assign RBAC roles.