diff --git a/grafana.yaml b/grafana.yaml
index dad886f..4ce1ea6 100644
--- a/grafana.yaml
+++ b/grafana.yaml
@@ -73,6 +73,8 @@ spec:
               value: "true"
             - name: GF_SECURITY_DISABLE_INITIAL_ADMIN_CREATION
               value: "true"
+            - name: GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH
+              value: "contains(groups[*], 'github.com:codemowers:admins') && 'Admin' || 'Viewer'"
           volumeMounts:
             - name: grafana-storage
               mountPath: /var/lib/grafana