From a33f86690f04ef72ee2ad72732b8fa3a9cce1a03 Mon Sep 17 00:00:00 2001
From: Quang Khai Nguyen <qngkhai.nguyen@gmail.com>
Date: Sat, 18 Apr 2026 23:09:41 +0200
Subject: [PATCH] Default role: admin

---
 prometheus/grafana/config.monitoring | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/prometheus/grafana/config.monitoring b/prometheus/grafana/config.monitoring
index 1063908..48ed29d 100644
--- a/prometheus/grafana/config.monitoring
+++ b/prometheus/grafana/config.monitoring
@@ -30,8 +30,8 @@ GF_AUTH_GENERIC_OAUTH_NAME_ATTRIBUTE_PATH=name
 # Otherwise, default to 'Viewer'.
 #GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH="contains(groups[*], 'admins') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"
 # Sets the default role for ALL OAuth users
-GF_AUTH_GENERIC_OAUTH_AUTO_ASSIGN_ORG_ROLE=Editor
-GF_USERS_AUTO_ASSIGN_ORG_ROLE=Editor
+GF_AUTH_GENERIC_OAUTH_AUTO_ASSIGN_ORG_ROLE=Admin
+GF_USERS_AUTO_ASSIGN_ORG_ROLE=Admin
 # Tell Grafana NOT to try and sync roles from the OIDC claims
 GF_AUTH_GENERIC_OAUTH_SKIP_ORG_ROLE_SYNC=true
 GF_LOG_LEVEL=debug
\ No newline at end of file