diff --git a/grafana/application.yml b/grafana/application.yml
index 3bab11e..6be225c 100644
--- a/grafana/application.yml
+++ b/grafana/application.yml
@@ -57,6 +57,7 @@ data:
     allow_sign_up = true
     use_pkce = true
     role_attribute_path = contains(groups[*], 'k-space:kubernetes:admins') && 'Admin' || 'Viewer'
+    allow_assign_grafana_admin = true
     [security]
     disable_initial_admin_creation = true
 ---