Configure RBAC options in Grafana

{{< admonition type="note" >}} Available in Grafana Enterprise and Grafana Cloud. {{< /admonition >}}

The table below describes the available RBAC configuration options for your Grafana stack. Like any other Grafana configuration, you can apply these options as environment variables.

Setting	Required	Description	Default
`permission_cache`	No	Enable to use in memory cache for loading and evaluating users' permissions.	`true`
`permission_validation_enabled`	No	Grafana enforces validation for permissions when a user creates or updates a role. The system checks the internal list of scopes and actions for each permission to determine they are valid. By default, if a scope or action is not recognized, Grafana logs a warning message. When set to `true`, Grafana returns an error.	`true`
`reset_basic_roles`	No	Reset Grafana's basic roles' (Viewer, Editor, Admin, Grafana Admin) permissions to their default. Warning, if this configuration option is left to `true` this will be done on every reboot.	`true`

Example RBAC configuration

bash

[rbac]

permission_cache = true

RBAC configuration options in Grafana

Configure RBAC options in Grafana

Example RBAC configuration