# Git sync folder admin permission Error

**URL:** <https://community.grafana.com/t/git-sync-folder-admin-permission-error/164463>\
**Category:** Grafana\
**Tags:** dashboard\
**Created:** [September 17, 2026, 8:12pm UTC](https://community.grafana.com/t/git-sync-folder-admin-permission-error/164463 "2026-09-17T20:12:54Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ccareau](https://avatars.discourse-cdn.com/v4/letter/c/9d8465/32.png) [@ccareau](https://community.grafana.com/u/ccareau)\
**Post date:** [September 17, 2026, 8:12pm UTC](https://community.grafana.com/t/git-sync-folder-admin-permission-error/164463/1 "2026-09-17T20:12:54Z")

</div>

**Title:** Folder Admin users cannot delete Git Sync-managed dashboards without organization Editor role

We are using Git Sync-managed folders with branch protection enabled. Users have the following permissions:

- Organization role: `Viewer`

- Team permission on their Git Sync-managed folder: `Admin`

These users can create and edit dashboards in their team folder successfully. Their changes are submitted to Git through the expected pull request workflow.

However, when they select a dashboard and use **Delete** , the **Bulk Delete Provisioned Resources** workflow fails while fetching branches and deleting the resource:

```auto
repositories.provisioning.grafana.app "git-sync-public-dashboards" is forbidden:
User "<redacted>" cannot create resource "repositories/jobs"
in API group "provisioning.grafana.app" in the namespace "default":
jobs.provisioning.grafana.app is forbidden: editor role is required

```

Based on the documentation, a Folder Admin should have permission to create, edit, and delete dashboards within that folder. However, bulk deletion creates a Git Sync repository job, which additionally requires `provisioning.jobs:create`. This permission appears to be granted through the organization-level `Editor` role rather than the folder-level permission.

This creates an inconsistent experience:

- Creating and editing dashboards works with `Viewer` + Folder Admin.

- Deleting those same dashboards fails because the user cannot create a provisioning job.

- Granting the global `Editor` role would also provide broader write access across Grafana, including alerting resources, which we want to avoid.

Could you confirm:

1. Is this behavior expected or a known Git Sync limitation?

2. Should a Folder Admin be able to delete dashboards from their provisioned folder without being an organization Editor?

3. Is there a supported RBAC role or minimal set of permissions we can assign to allow Git Sync jobs for authorized folders without granting the full global Editor role?

---

<div class="post-metadata">

**Author:** ![infofcc3](https://sea2.discourse-cdn.com/grafana/user_avatar/community.grafana.com/infofcc3/32/51248_2.png) [@infofcc3](https://community.grafana.com/u/infofcc3)\
**Post date:** [September 18, 2026, 6:46am UTC](https://community.grafana.com/t/git-sync-folder-admin-permission-error/164463/2 "2026-09-18T06:46:29Z")

</div>

Hello @ccareau  
Please refer to the following Grafana documentation for Git Sync permissions and custom RBAC roles:

> **[Git Sync permissions and access control | Grafana documentation](https://grafana.com/docs/grafana/latest/as-code/observability-as-code/git-sync/permissions-grafana/)**
>
> Learn about permissions and access control for Git Sync, including required Grafana roles and repository permissions.

For custom RBAC roles

> **[Create custom Grafana RBAC roles | Grafana documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/create-custom-roles/)**
>
> Create custom RBAC roles.

---

<div class="post-metadata">

**Author:** ![ccareau](https://avatars.discourse-cdn.com/v4/letter/c/9d8465/32.png) [@ccareau](https://community.grafana.com/u/ccareau)\
**Post date:** [September 25, 2026, 2:34pm UTC](https://community.grafana.com/t/git-sync-folder-admin-permission-error/164463/3 "2026-09-25T14:34:40Z")

</div>

Um this is not about rbac, this is a bug on grafana’s side most likely, considering the delete button works for dev inside the dashboards settings but not on the folder dashboards dropdown view

---

<div class="post-metadata">

**Author:** ![ccareau](https://avatars.discourse-cdn.com/v4/letter/c/9d8465/32.png) [@ccareau](https://community.grafana.com/u/ccareau)\
**Post date:** [September 25, 2026, 8:35pm UTC](https://community.grafana.com/t/git-sync-folder-admin-permission-error/164463/4 "2026-09-25T20:35:00Z")

</div>

FYI, found out This is an active issue under here [https://github.com/grafana/grafana/pull/132075](https://github.com/grafana/grafana/pull/132075)