Announcing Role Based Access Control in ClickStack
Blog post from ClickHouse
Role-Based Access Control (RBAC) has been introduced to Managed ClickStack, enabling teams to define permissions based on roles for accessing resources such as dashboards, saved searches, and notebooks. This feature replaces the previous model where all users shared the same permissions, which led to duplicated setups and high operational overhead. RBAC allows for roles to be assigned with varying levels of access—no access, read, or manage—across different resource types, and even supports fine-grained access rules for more precise control. Integration with ClickHouse Cloud ensures consistent user management and permissions, with ClickStack roles determining what users can do within observability workflows. Although this release establishes a robust foundation for RBAC, future updates aim to enhance data-level access controls, particularly by introducing row-level access requirements, to streamline management across both ClickStack and ClickHouse environments.