How to enable Role mapping for Azure AD Groups/ Users (Grafana OSS)

  • What Grafana version and what operating system are you using?

Grafana v11.5.1 (c6c701cf5b) OSS

  • What are you trying to achieve?

Automatically assign Roles when sign in with AzureAD User

  • How are you trying to achieve it?


I entered the “:1:Editor”

  • What happened?

When signing in I only get the viewer Role although my user member of the azure AD group.

  • What did you expect to happen?

To get the “Editor” Role after signing in.

  • Can you copy/paste the configuration(s) that you are having problems with?

  • Did you receive any errors in the Grafana UI or in related logs?

There no error in UI or Log.

  • Did you follow any online instructions? If so, what is the URL?

Configure Azure AD/Entra ID OAuth authentication | Grafana documentation
but the UI Setting in my screenshot is not part of the instruction.

I got the follow reply from Grafana support:
Integrating Azure AD (Microsoft Entra ID) with Grafana has different levels of availability depending on the Grafana license:

  • Azure AD OAuth2 authentication is available and works on both Grafana Open Source and Grafana Enterprise.
  • Native Azure AD SAML integration and Team Sync with Azure AD groups are features exclusive to Grafana Enterprise.

Therefore, the specific Azure AD setting you’re asking about will only work on an enterprise-licensed Grafana if it relies on native SAML or team synchronization with Azure AD groups. Basic authentication via OAuth2 is supported in both versions.

Is there still a way to implement this automated role mapping?