diff --git a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
index 6de1443..6f46f21 100644
--- a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
+++ b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
@@ -57,4 +57,5 @@ spec:
       token_url: https://dex.observability.t09.de/token
       api_url: https://dex.observability.t09.de/userinfo
       redirect_uri: https://grafana.observability.t09.de/login/generic_oauth
-      role_attribute_path: "contains(groups[*], 'DevFW') && 'GrafanaAdmin'"
+      role_attribute_path: "contains(groups[*], 'DevFW') && 'GrafanaAdmin' || 'Editor'"
+      allow_assign_grafana_admin: "true"