Roles

Overview

Roles are the core unit of access control in SigNoz. A role groups permissions together — when a principal is assigned a role, they receive all the permissions that role contains.

Prerequisites

• An active SigNoz license
• A role with the required permissions. See the Permissions Reference for the detailed permissions required for each role action.

Managed Roles

SigNoz includes four built-in managed roles:

• SigNoz-Admin — Full administrative access to all SigNoz resources.
• SigNoz-Editor — Can create and modify observability resources such as dashboards, alerts, and pipelines. Cannot manage users, roles, or service accounts.
• SigNoz-Viewer — Read-only access to observability data and resources.
• SigNoz-Anonymous — Access to public resources only, such as publicly shared dashboards. Assigned automatically.

Create a Custom Role

1. Navigate to Settings > Roles.
2. Click Custom role.
3. Enter a name and an optional description. Names must use only lowercase letters and hyphens, and can be up to 50 characters long (for example, service-owner or platform-readonly).
4. Click Create.

Role Details Page

After creating or selecting a role, you are taken to the role details page.

Overview Tab

Shows the role's description, created and last modified timestamps, and a list of permissions. Each permission type (Create, Read, Update, Delete, List, Attach, Detach) appears as a clickable item.

Configuring Permissions (Custom Roles)

Click any permission item to open the permission side panel. For each resource type, choose the scope:

• All — Grants the permission on every instance of that resource type.
• Only selected — Grants the permission only on specific instances. Enter the selector for the resource you want to grant access to (for example, a role name or a resource ID).
• None — Does not grant the permission on any instance of that resource type.

Unsaved changes are indicated by a dot badge with a count next to the permission item. Use the Save or Discard buttons in the panel footer to apply or revert your changes.

Edit a Custom Role

1. Open the role details page.
2. Click Edit Role Details.
3. Update the description.
4. Click Save.

Delete a Custom Role

1. Open the role details page.
2. Click the delete icon.
3. Confirm the deletion.

Next Steps

• Service Accounts — Set up programmatic API access
• Permissions Reference — Look up permissions for each resource
• Authorization Overview — Understand how access control works