Configure RBAC for Adaptive Logs

You can use role-based access control (RBAC) to manage permissions for users in Adaptive Logs.

Note
When granting users access to Adaptive Logs, consider the fact that Adaptive Logs patterns may contain sensitive information.

The following table shows the role names, descriptions, and associated actions that you can assign to users.

Role	Description	Associated Actions
Admin	Overall read and write access in Adaptive Logs	`grafana-adaptivelogs-app.plugin:access` `grafana-adaptivelogs-app.patterns:read` `grafana-adaptivelogs-app.patterns:apply` `grafana-adaptivelogs-app.exemptions:read` `grafana-adaptivelogs-app.exemptions:create` `grafana-adaptivelogs-app.exemptions:edit` `grafana-adaptivelogs-app.exemptions:delete` `grafana-adaptivelogs-app.expiring-exemptions:create` `grafana-adaptivelogs-app.expiring-exemptions:delete` `grafana-adaptivelogs-app.drop-rules:read` `grafana-adaptivelogs-app.drop-rules:write` `grafana-adaptivelogs-app.drop-rules:delete` `grafana-adaptivelogs-app.segments:admin` `grafana-adaptivelogs-app.tenant-config:edit`
Drop Rules Reader	Read access to drop rules in Adaptive Logs	`grafana-adaptivelogs-app.plugin:access`, `grafana-adaptivelogs-app.drop-rules:read`
Patterns Editor	Read and write access to recommendations in Adaptive Logs. Users can view patterns and apply changes to drop rates	`grafana-adaptivelogs-app.plugin:access`, `grafana-adaptivelogs-app.patterns:read`, `grafana-adaptivelogs-app.patterns:apply`
Patterns Reader	Read access to recommendations in Adaptive Logs. Users can view patterns and don’t have the ability to apply drops	`grafana-adaptivelogs-app.plugin:access`, `grafana-adaptivelogs-app.patterns:read`
Plugin Access	Access to the Adaptive Logs plugin. Users can access the Adaptive Logs plugin UI.	`plugins.app:access` (with `plugins:id:grafana-adaptivelogs-app` scope), `grafana-adaptivelogs-app.plugin:access`