Roles

System roles

The three built-in roles cover the most common needs and can be assigned as-is. They are locked — you can view their permissions but not edit or delete them, so there is always a known-good baseline.

Role	Typical use
Admin	Team leads and platform owners who administer the organization.
Member	Engineers doing day-to-day observability work.
Viewer	Stakeholders, auditors, or anyone who should see but not change.

Custom roles

When the built-in roles aren't a perfect fit, create your own — for example a role that can manage alerts and on-call but only view everything else.

Creating a role

1. Go to Settings → Roles and Permissions and click Create role.
2. Give the role a clear name and a short description.
3. In the permission matrix, tick the permissions to grant. Each row is a module (Dashboards, Alerts, Network, …) and each column is an action (View, Manage, Use).
4. Use the shortcuts to move faster: the checkbox at the top of a column selects that action for every module; the checkbox on a row selects every action for that module; All / None set everything at once; and the filter box narrows the matrix to a module by name.
5. Click Create role. It's now available to assign.

Editing and deleting

• Open any custom role to adjust its name, description or permissions.
• Each role card shows a member count — how many people currently hold it.
• Deleting a role removes it from everyone who had it; they keep the permissions from their other roles. System roles can't be deleted.

Tip: Admin-only permissions are highlighted in the matrix. Granting any of them (for example users.manage or billing.manage) makes a role able to administer that sensitive area — reserve them for roles you truly intend to be administrative.