diff --git a/prometheus/grafana/config.monitoring b/prometheus/grafana/config.monitoring
index 1063908..48ed29d 100644
--- a/prometheus/grafana/config.monitoring
+++ b/prometheus/grafana/config.monitoring
@@ -30,8 +30,8 @@ GF_AUTH_GENERIC_OAUTH_NAME_ATTRIBUTE_PATH=name
 # Otherwise, default to 'Viewer'.
 #GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH="contains(groups[*], 'admins') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"
 # Sets the default role for ALL OAuth users
-GF_AUTH_GENERIC_OAUTH_AUTO_ASSIGN_ORG_ROLE=Editor
-GF_USERS_AUTO_ASSIGN_ORG_ROLE=Editor
+GF_AUTH_GENERIC_OAUTH_AUTO_ASSIGN_ORG_ROLE=Admin
+GF_USERS_AUTO_ASSIGN_ORG_ROLE=Admin
 # Tell Grafana NOT to try and sync roles from the OIDC claims
 GF_AUTH_GENERIC_OAUTH_SKIP_ORG_ROLE_SYNC=true
 GF_LOG_LEVEL=debug
\ No newline at end of file