Important: This documentation is about an older version. It's relevant only to the release noted, many of the features and functions have been updated or replaced. Please view the current version.

Documentation

Grafana documentation

Administration

Roles and permissions

Role-based access control (RBAC)

Configure RBAC

Grafana Cloud Enterprise Open source

Configure RBAC in Grafana

Note: Available in Grafana Enterprise and Grafana Cloud Advanced.

The table below describes all RBAC configuration options. Like any other Grafana configuration, you can apply these options as environment variables.

Setting	Required	Description	Default
`permission_cache`	No	Enable to use in memory cache for loading and evaluating users’ permissions.	`true`
`permission_validation_enabled`	No	Grafana enforces validation for permissions when a user creates or updates a role. The system checks the internal list of scopes and actions for each permission to determine they are valid. By default, if a scope or action is not recognized, Grafana logs a warning message. When set to `true`, Grafana returns an error.	`false`
`reset_basic_roles`	No	Reset Grafana’s basic roles’ (Viewer, Editor, Admin, Grafana Admin) permissions to their default. Warning, if this configuration option is left to `true` this will be done on every reboot.	`true`