Skip to content

Role managers can revoke access they do not hold

Update3 days agoUnverifiedAdded Oct 4, 2026

If you have the required permissions to manage roles or role assignments, you can revoke access without holding the permissions being removed. This applies when you update or delete a role, or remove role assignments through the /api/access-control/ APIs.

Topics: Security, Developer tools

Grafana Labs's release notes

More Grafana Cloud releases

Every Grafana Cloud release

Also shipped on Oct 2, 2026

Grafana Labs in October 2026

New releases by email

Tuesday mornings: the week's data, AI and developer-tools releases, only in weeks when something shipped.

Double opt-in. Unsubscribe any time.