Built-in role assignments

To control what your users can access or not, you can assign or unassign Custom roles or Fixed roles to the existing Organization roles or to the Grafana Server Admin role.

These assignments are called built-in role assignments.

During startup, Grafana will create default assignments for you. When you make any changes to the built-on role assignments, Grafana will take them into account and won’t overwrite during next start.

For more information, refer to Fine-grained access control references.

Manage built-in role assignments

You can create or remove built-in role assignments using Fine-grained access control API or using Grafana Provisioning.