Grafana Cloud

Configure RBAC for Adaptive Traces

You can use role-based access control (RBAC) to manage permission for users for Adaptive Traces.

The following table shows the default role, its description, and associated actions.

RoleDescriptionAssociated Actions
AdminOverall read and write access in Adaptive Tracesgrafana-adaptivetraces-app.plugin:access, grafana-adaptivetraces-app.recommendations:read, grafana-adaptivetraces-app.recommendations:apply, grafana-adaptivetraces-app.policies:read, grafana-adaptivetraces-app.policies:write, grafana-adaptivetraces-app.policies:delete

The Admin role is granted by default to users with the Grafana Admin or Admin organization role.

Available permission actions

You can use the following permission actions to build custom roles that grant more granular access to Adaptive Traces.

ActionDescription
grafana-adaptivetraces-app.plugin:accessAccess the Adaptive Traces plugin UI. Required for all other actions.
grafana-adaptivetraces-app.recommendations:readView recommendations on the Overview page.
grafana-adaptivetraces-app.recommendations:applyApply or dismiss recommendations.
grafana-adaptivetraces-app.policies:readView policies on the Policies page.
grafana-adaptivetraces-app.policies:writeCreate and edit policies.
grafana-adaptivetraces-app.policies:deleteDelete policies.

Example: Create a read-only viewer role

To allow a user to view policies and recommendations without making changes, create a custom role with the following actions:

  • grafana-adaptivetraces-app.plugin:access
  • grafana-adaptivetraces-app.recommendations:read
  • grafana-adaptivetraces-app.policies:read

For more information on creating custom roles, refer to Create custom roles.

Assign users to a role

You can assign users to a role in the Grafana Cloud user interface or using the HTTP API.

For more information, refer to Assign RBAC roles and RBAC API.