public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Team LBAC: Add doc description of lbac rule (#83384)

Browse Source 
* chore: add doc description of lbac rule

* spellling

* Update docs/sources/administration/data-source-management/teamlbac/_index.md

Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>

---------

Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>
This commit is contained in:
Eric Leijonmarck
2024-02-26 14:31:21 +00:00
committed by GitHub
co-authored by Alexander Zobnin
parent 4c0da354ca
commit 1f484fef9d
2 changed files with 24 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md
+7
View File
@@ -31,6 +31,13 @@ Team LBAC is available on Cloud for data sources created with basic authenticati
1. Define Label Selector for the Rule
- Add a label selector to the rule. Refer to Loki query documentation for guidance on the types of log selections you can specify.
### LBAC rule
A LBAC rule is a `logql` query that runs as a query to the loki instance for your logs. Each rule is it's own filtering operating independently from the other rules within a team. For example, you can create a label policy that includes all log lines with the label.
One rule `{namespace="dev", cluster="us-west-0"}` created with multiple namespaces will be seen as `namespace="dev"` **AND** `cluster="us-west-0"`.
Two rules `{namespace="dev"}`, `{cluster="us-west-0"}` created for a team will be seen as `namespace="dev"` **OR** `cluster="us-west-0"`.
#### Best practices
We recommend you only add `query` permissions for teams that should use the data source and only `Admin` have `Admin` permissions.