admin
Manage Grafana Cloud accounts — organizations, stacks, RBAC roles and assignments, SSO/SAML/OAuth/GitHub auth, service accounts for CI/CD, user invites, team membership, and API-driven provisioning. Creates stacks via the Cloud API, mints service-account tokens, applies role assignments, configures SSO providers, and provisions teams/folders/dashboards via Terraform. Use when managing Grafana Cloud access, configuring SSO/SAML/OAuth, setting up service accounts for Terraform/CI/CD, assigning RBAC roles, inviting users, managing multiple stacks or organizations, provisioning cloud resources via API or Terraform, or auditing admin actions — even when the user says "set up SSO", "create a stack", "make a service account", or "onboard a team" without explicitly saying "admin".
Install
With your agent
Install OMGSkills skill "grafana/skills:admin" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/grafana/skills /tmp/skills && ln -s /tmp/skills/skills/grafana-cloud/admin ~/.claude/skills/adminFrom README
Grafana Cloud Admin Docs: https://grafana.com/docs/grafana-cloud/account-management.md Common Workflows Setting up a new stack Onboarding a team Invite users via POST /api/org/invites (one curl per user — see references/api-reference.md § Stack API) Create the team via POST /api/teams Add each user via POST /api/teams/{teamId}/members Assign an RBAC role to the team (see § RBAC below) Verify: GET /api/teams/{teamId}/members returns the expected user list Configuring SSO (Okta / SAML / GitHub) Pick the provider config from references/sso.md and drop into grafana.ini Restart Grafana Always validate in an incognito window before announcing: see references/sso.md § Verifying SSO for the 5-step verification + role-mapping debug pattern Deleting a stack (destructive) If the GET still returns 200 after a few seconds, the delete didn't apply — re-check the stack ID and Cloud API key.
More from this repo
k6-docs
Used to write or review k6 documentation across the three k6 repositories - k6-DefinitelyTyped (TypeScript types),...
adaptive-metrics
Cut Grafana Cloud Metrics cost by shrinking active-series count with Adaptive Metrics aggregation rules —...
admission-control
Used when the user asks to "write a validator", "add validation", "implement admission control", "write a mutating...