Label-based access control (LBAC) for cloud traces
Traces can contain sensitive data, which often forces organizations to limit access or separate teams into different tracing tenants. Tempo LBAC lets administrators control which traces each Grafana team can access using resource attributes such as service, environment and region.
Also shipped Jul 20, 2026Grafana Labs in July 2026 →
Lakehouse : Cross-cloud Lakehouse now supports integration with SAP Business Data Cloud (BDC) in Preview
Lakehouse : Cross-cloud Lakehouse now supports integration with SAP Business Data Cloud (BDC) in Preview. This update includes the following features: Federation from SAP BDC: Create Delta Sharing catalogs in Lakehouse to automatically synchronize shares, schemas, and tables from SAP BDC.
OIDC federated authentication (Public Preview)
OpenID Connect (OIDC) security integrations for federated single sign-on (SSO) are available in Public Preview. Multiple OIDC integrations, or OIDC alongside an existing SAML2 integration, require identifier-first login . Without identifier-first login, only one SSO integration (SAML2 or OIDC) can be ENABLED=TRUE at a time.
DML into frozen regions of dynamic tables (General availability)
You can now use DML statements (INSERT, UPDATE, MERGE, DELETE) to modify rows directly in the frozen region of a dynamic table. This enables use cases such as GDPR-required row deletions or correcting specific records without triggering a full refresh of the active region. For more information, see DML into a frozen region .
Pass-through policies for dynamic tables with incremental refresh (General availability)
Dynamic tables that have base tables with arbitrary masking or row access policies can now maintain incremental refresh when the policy is pass-through for the role used during refresh (that is, when the refresh role has unrestricted access to all rows and columns regardless of the policy condition).
[In preview] Public Preview: Protect sensitive generative AI telemetry in Application Insights and Microsoft Foundry
Azure Monitor Application Insights now stores generative AI content in a dedicated GenAIContent table (AppGenAIContent in Log Analytics), making it possible to apply newly available access controls to sensitive AI telemetry. Because Application Insights p
AI credit pools for cost centers in the billing UI
You can now manage a cost center’s AI credit pool directly in the billing UI where you create and edit cost centers. Previously, you could only manage this through the GitHub REST API. This feature is available for Copilot Business and Copilot Enterprise on GitHub Enterprise Cloud. Toggle the AI credit pool on when you create or edit a cost center.
More from Grafana CloudEvery Grafana Cloud release →
Sync OpenTelemetry Collector pipelines with GitHub Action
Following our announcement that OpAMP support is generally available in Fleet Management, we’ve updated our GitHub Action to support OpenTelemetry pipelines along with Alloy ones. Now you can manage all your configuration as code with one Action.
Volumetric Policies for Adaptive Traces are Generally Available
Cost-effectively get the right representative mix of traces with volumetric policies! Now Generally Available, volumetric policies intelligently balance cost, service representation, and value to automagically give you the right traces. We’ve bolstered volumetric policies under the hood to be even more cost predictable.
Cost Attribution for Synthetic Monitoring: Track spend by team, cost center, or other dimensions
Synthetic Monitoring usage is now included in Grafana Cloud Cost Attribution, as part of the Cost Management and Billing App. You can attribute the cost of your checks to whatever dimensions matter to your organization: teams, cost centers, business units, services, or even your own customers.
AI Observability is now Agent Observability: Updated branding and migration guide
Grafana’s AI Observability (alias: Sigil) is being renamed to Grafana Agent Observability. As the product has grown to cover full agent lifecycles , from tool use to evaluations to guardrails , the name is catching up to what it already does.
Manage Grafana Cloud IP allowlists with one API
Keep your firewall automation synchronized with Grafana Cloud through one versioned Allowlist API. A consistent JSON format across services and regions makes allowlists easier to retrieve, parse, and validate. Choose the scope that matches your environment: global, regional, or per-service.
Catch hardcoded secrets in Grafana Cloud k6 scripts
As you write a performance test in Grafana Cloud k6, the script editor can flag hardcoded API keys, tokens, and passwords before you run the test. Those values are stored in plaintext in the script, so leaving them there puts credentials at risk when you share the file or check it into version control.
Infinite scroll for your configuration pipelines
Remote configuration is a core feature of Grafana Fleet Management. As the number of configuration pipelines grows, browsing and managing them can become more cumbersome when navigating through paginated lists. To make this experience more seamless, the Remote configuration tab now uses infinite scrolling.
Pipeline history now includes revision author
Grafana Fleet Management has added a Changed by column to the pipeline history view. Now you can see who made the change as part of your audit trail. Only changes made through the Fleet Management user interface record an author.