---
title: "Configure RBAC for Adaptive Logs | Grafana Cloud documentation"
description: "Describes how to use role based access control to manage permissions to Adaptive Logs."
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

# Configure RBAC for Adaptive Logs

You can use [role-based access control](/docs/grafana/latest/administration/roles-and-permissions/access-control/) (RBAC) to manage permissions for users in Adaptive Logs.

> Note
> 
> When granting users access to Adaptive Logs, consider the fact that Adaptive Logs patterns may contain sensitive information.

The following table shows the role names, descriptions, and associated actions that you can assign to users.

Expand table

RoleDescriptionAssociated Actions

AdminOverall read and write access in Adaptive Logs

- `grafana-adaptivelogs-app.plugin:access`
- `grafana-adaptivelogs-app.patterns:read`
- `grafana-adaptivelogs-app.patterns:apply`
- `grafana-adaptivelogs-app.exemptions:read`
- `grafana-adaptivelogs-app.exemptions:create`
- `grafana-adaptivelogs-app.exemptions:edit`
- `grafana-adaptivelogs-app.exemptions:delete`
- `grafana-adaptivelogs-app.expiring-exemptions:create`
- `grafana-adaptivelogs-app.expiring-exemptions:delete`
- `grafana-adaptivelogs-app.drop-rules:read`
- `grafana-adaptivelogs-app.drop-rules:write`
- `grafana-adaptivelogs-app.drop-rules:delete`
- `grafana-adaptivelogs-app.segments:admin`
- `grafana-adaptivelogs-app.tenant-config:edit`

Drop Rules ReaderRead access to drop rules in Adaptive Logs`grafana-adaptivelogs-app.plugin:access`, `grafana-adaptivelogs-app.drop-rules:read`

Patterns EditorRead and write access to recommendations in Adaptive Logs. Users can view patterns and apply changes to drop rates`grafana-adaptivelogs-app.plugin:access`, `grafana-adaptivelogs-app.patterns:read`, `grafana-adaptivelogs-app.patterns:apply`

Patterns ReaderRead access to recommendations in Adaptive Logs. Users can view patterns and don’t have the ability to apply drops`grafana-adaptivelogs-app.plugin:access`, `grafana-adaptivelogs-app.patterns:read`

Plugin AccessAccess to the Adaptive Logs plugin. Users can access the Adaptive Logs plugin UI.`plugins.app:access` (with `plugins:id:grafana-adaptivelogs-app` scope), `grafana-adaptivelogs-app.plugin:access`

Segments AdminAccess to create and manage segments in Adaptive Logs`grafana-adaptivelogs-app.segments:admin`

Expiring Exemptions UserAbility to use the expiring exemptions button. **This role is automatically granted to all users.**`grafana-adaptivelogs-app.exemptions:read`, `grafana-adaptivelogs-app.expiring-exemptions:create`, `grafana-adaptivelogs-app.expiring-exemptions:delete`

> Note
> 
> You can assign users to multiple roles.

## Assign users to a role

You can assign users to a role in the Grafana Cloud user interface or using the HTTP API.

For more information, refer to [Assign RBAC roles](/docs/grafana-cloud/account-management/authentication-and-permissions/access-control/assign-rbac-roles/) and [RBAC API](/docs/grafana-cloud/developer-resources/api-reference/http-api/access_control/).