apitech
/
grafana
mirror of https://github.com/grafana/grafana
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
39736 Commits
2179 Branches
608 Tags
1.9 GiB
 
 
 
 
 
 
Tag: Branch: Tree: 3d8890453f
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '3d8890453f'
${ noResults }
grafana/docs/sources/administration/roles-and-permissions/access-control/configure-rbac/index.md

2.5 KiB
Raw Blame History

aliases description menuTitle title weight
[../../../enterprise/access-control/configure-rbac/] Learn how to configure RBAC. Configure RBAC Configure RBAC in Grafana 30

Configure RBAC in Grafana

Note: Available in [Grafana Enterprise]({{< relref "../../../../introduction/grafana-enterprise/" >}}) and Grafana Cloud Advanced.

The table below describes all RBAC configuration options. Like any other Grafana configuration, you can apply these options as [environment variables]({{< relref "../../../../setup-grafana/configure-grafana/#configure-with-environment-variables" >}}).

Setting Required Description Default
permission_cache No Enable to use in memory cache for loading and evaluating users' permissions. true
permission_validation_enabled No Grafana enforces validation for permissions when a user creates or updates a role. The system checks the internal list of scopes and actions for each permission to determine they are valid. By default, if a scope or action is not recognized, Grafana logs a warning message. When set to true, Grafana returns an error. false
reset_basic_roles No Reset Grafana's basic roles' (Viewer, Editor, Admin, Grafana Admin) permissions to their default. Warning, if this configuration option is left to true this will be done on every reboot. true

Example RBAC configuration

[rbac]

permission_cache = true