diff --git a/infra/values/base/keycloak-values.yaml b/infra/values/base/keycloak-values.yaml
index 68b78ec..c6745db 100644
--- a/infra/values/base/keycloak-values.yaml
+++ b/infra/values/base/keycloak-values.yaml
@@ -224,11 +224,17 @@ keycloakConfigCli:
         "groups": [
           {
             "name": "k8s",
-            "path": "/k8s"
+            "path": "/k8s",
+            "clientRoles": {
+              "grafana": ["Editor"]
+            }
           },
           {
             "name": "dev",
-            "path": "/dev"
+            "path": "/dev",
+            "clientRoles": {
+              "grafana": ["Viewer"]
+            }
           },
           {
             "name": "ArgoCD Admins",