diff --git a/group_vars/grafana/main.yml b/group_vars/grafana/main.yml
index 956b3ea..a9e0860 100644
--- a/group_vars/grafana/main.yml
+++ b/group_vars/grafana/main.yml
@@ -1,3 +1,4 @@
+grafana_anonymous_enabled: true
 grafana_ldap_enabled: true
 grafana_http_addr: '[::1]'
 grafana_ldap_host: dc0.pyrocufflink.blue
diff --git a/roles/grafana/templates/grafana.ini.j2 b/roles/grafana/templates/grafana.ini.j2
index 22d8898..ced3be6 100644
--- a/roles/grafana/templates/grafana.ini.j2
+++ b/roles/grafana/templates/grafana.ini.j2
@@ -334,7 +334,7 @@ sigv4_auth_enabled = false
 #################################### Anonymous Auth ######################
 [auth.anonymous]
 # enable anonymous access
-enabled = false
+enabled = {{ grafana_anonymous_enabled|d|bool|string|lower }}
 
 # specify organization name that should be used for unauthenticated users
 org_name = Main Org.