
For example, instead of assigning five users access to the same dashboard, you can create a team that consists of those users and assign dashboard permissions to the team. Teams and permissionsĪ team is a group of users within an organization that have common dashboard and data source permission needs.
Edit and preview dashboards, but cannot save their changes or create new dashboards.Įxtending the viewer role is useful for public Grafana installations where you want anonymous users to be able to edit panels and queries, but not be able to save or create new dashboards.įor more information about assigning dashboard preview permissions to viewers, refer to Enable viewers to preview dashboards and use Explore. If you have access to the Grafana server, you can modify the default viewer role so that viewers can: Viewers with dashboard preview and Explore permissions This setting can be used to enable self-organizing teams to administer their own dashboards.įor more information about assigning administrator permissions to editors, refer to Grant editors administrator permissions. Note: This permission does not allow editors to manage folders, dashboards, and teams that they do not create. If you have access to the Grafana server, you can modify the default editor role so that editors can use administrator permissions to manage dashboard folders, dashboards, and teams that they create. Important: When a user creates a dashboard or a folder, he is set as Admin of it.įor more information about assigning dashboard folder permissions, refer to Grant dashboard folder permissions.įor more information about assigning dashboard permissions, refer to Grant dashboard permissions. View: Can only view dashboards and folders. Editors cannot change folder or dashboard permissions. Can edit or delete a folder, and create dashboards and subfolders in a folder. Edit: Can create, edit, or delete a dashboard. Administrators can also change dashboard and folder permissions. Admin: Can create, edit, or delete a dashboard. You can specify the following permissions to dashboards and folders. Important: The dashboard permissions you specify override the organization permissions you assign to the user for the selected entity. #Slack open roles update
While that user can see all dashboards, you can grant them access to update only one of them. For example, you might want a certain viewer to be able to edit a dashboard. When you want to extend a viewer’s ability to edit and save dashboard changes or limit an editor’s permission to modify a dashboard, you can assign permissions to dashboards and folders. The following table lists permissions for each role. Viewer: Can view dashboards and playlists.Editor: Can view and edit dashboards, folders, and playlists.Organization administrator: Has access to all organization resources, including dashboards, users, and teams.Grafana uses the following roles to control user access: For example, an editor can see and update all dashboards in an organization, unless those dashboards have been specifically restricted using dashboard permissions. Organization role-based permissions are global, which means that each permission level applies to all Grafana resources within an given organization. Permissions assigned to a user within an organization control the extent to which the user has access to and can update the following organization resources:įor more information about managing organization users, see User management. An organization is an entity that exists within your instance of Grafana. Organization users and permissionsĪll Grafana users belong to at least one organization. To assign or remove server administrator privileges, see Server user management.
Note: The server administrator role does not exist in Grafana Cloud.