diff --git a/mon-system/monitoring.yaml b/mon-system/monitoring.yaml
index 0f4da2e..6c6b3cc 100644
--- a/mon-system/monitoring.yaml
+++ b/mon-system/monitoring.yaml
@@ -496,8 +496,10 @@ spec:
               value: "https://authentik.dooplex.hu/application/o/grafana/end-session/"
             - name: GF_AUTH_OAUTH_AUTO_LOGIN
               value: "true"
+            - name: GF_AUTH_GENERIC_OAUTH_GROUPS_ATTRIBUTE_PATH
+              value: "groups"
             - name: GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH
-              value: "role"
+              value: "(contains(groups[*], 'Server Admin') || contains(groups[*], 'Grafana Admins')) && 'Admin' || 'Viewer'"
             - name: GF_LOG_LEVEL
               value: "debug"
             - name: GF_AUTH_GENERIC_OAUTH_DEBUG