From f5c78e0ad97ce9ecb657cc9ef4d4b7b1885787da Mon Sep 17 00:00:00 2001
From: Misi <mgyongyosi@users.noreply.github.com>
Date: Wed, 13 Mar 2024 14:48:13 +0100
Subject: [PATCH] RBAC: Add ActionSettingsRead action to general.auth.config
 writer (#84366)

Add ActionSettingsRead action to general.auth.config writer
---
 pkg/services/accesscontrol/roles.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkg/services/accesscontrol/roles.go b/pkg/services/accesscontrol/roles.go
index b9ce718556a..5c82eefb8f4 100644
--- a/pkg/services/accesscontrol/roles.go
+++ b/pkg/services/accesscontrol/roles.go
@@ -270,6 +270,10 @@ var (
 		Description: "Read and update the Grafana instance's general authentication configuration.",
 		Group:       "Settings",
 		Permissions: []Permission{
+			{
+				Action: ActionSettingsRead,
+				Scope:  "settings:auth:oauth_allow_insecure_email_lookup",
+			},
 			{
 				Action: ActionSettingsWrite,
 				Scope:  "settings:auth:oauth_allow_insecure_email_lookup",