Use role-based access control (RBAC) to manage permissions for users in the Cost Management and Billing App.
The following table shows the role names, descriptions, and associated actions that you can assign to users.
| Role | Description | Associated actions |
|---|
| Full admin | Full access to all features | grafana-cmab-app.billing-usage:readgrafana-cmab-app.invoices:readgrafana-cmab-app.costattribution:readgrafana-cmab-app.costattribution:writegrafana-cmab-app.usage-alerts:readgrafana-cmab-app.usage-alerts:write
|
| Billing and usage reader | Read-only access to billing and usage data | grafana-cmab-app.billing-usage:read
|
| Invoice reader | Read-only access to invoices | grafana-cmab-app.invoices:readgrafana-cmab-app.billing-usage:read
|
| Cost attribution admin | Full access to cost attribution | grafana-cmab-app.costattribution:readgrafana-cmab-app.costattribution:writegrafana-cmab-app.billing-usage:read
|
| Cost attribution reader | Read-only access to cost attribution | grafana-cmab-app.costattribution:readgrafana-cmab-app.billing-usage:read
|
| Usage alerts admin | Full access to usage alerts | grafana-cmab-app.usage-alerts:readgrafana-cmab-app.usage-alerts:writegrafana-cmab-app.billing-usage:read
|
| Usage alerts reader | Read-only access to usage alerts | grafana-cmab-app.usage-alerts:readgrafana-cmab-app.billing-usage:read
|
Note
You can assign users to multiple roles.
Assign users to a role
You can assign users to a role in the Grafana Cloud UI or using the HTTP API.
Refer to Assign fixed roles in the UI using the role picker and RBAC API for more information.
Grafana Cloud
