Fine-grained access control

Fine-grained access control provides a standardized way of granting, changing, and revoking access when it comes to viewing and modifying Grafana resources, such as users and reports. Fine-grained access control works alongside the current Grafana permissions, and it allows you granular control of users’ actions.

To learn more about how fine-grained access control works, refer to and Permissions. To use the fine-grained access control system, refer to .

Fine-grained access control considers a) who has an access (), and b) what they can do and on which Grafana resource (role).

Refer to to learn about grant or revoke access to your users.

Fine-grained access control is available for the following capabilities:

• Manage users
• Manage data source permissions
• Provision Grafana

To learn about specific endpoints where you can use fine-grained access control, refer to Permissions and to the relevant documentation.

In your config file, add as a .

You can use GF_FEATURE_TOGGLES_ENABLE = accesscontrol environment variable to override the config file configuration and enable fine-grained access control.

Refer to for more information.