Grafana cloud folder permissions

Grafana Dashboards
1

Hi,

A user deleted the a dashboard folder, I would like only admins to be able to do this but the other roles should be able to create and edit dashboards what should I do also the roles are managed in Okta, apart from creating a custom role is their a workaround for Grafana cloud via terrorform?

Thanks

2

I would say that you can update builtin organisation roles (e. g Editor) - remove all folder:* permission except read.

TF idea (of course you must import resource first in this case):

resource "grafana_role" "basic_editor" {
  name                   = "basic:editor"
  description            = "Editor role"
  display_name           = "Editor"
  uid                    = "basic_editor"
  auto_increment_version = true
  global                 = true
  hidden                 = true
  group                  = "Basic"

  permissions {
    action = "folders:read"
    scope  = "folders:uid:*"
  }
... other permissions for editor role