Auth: Implement skip org role sync for jwt (#61647)

* Add new config option * Add frontend control * Condition new auth broker with config option * Condition old auth broker with config option Co-authored-by: Jo <joao.guerreiro@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
2023-01-18 13:59:50 +01:00
parent 3debfd0ca7
commit 4d095547f8
9 changed files with 74 additions and 43 deletions
@@ -73,6 +73,17 @@ Grafana instance to include the JWT in the request's headers.
 In a scenario where it is not possible to rewrite the request headers you
 can use URL login instead.

+## Skip organization role
+
+To skip the assignment of roles and permissions upon login via JWT and handle them via other mechanisms like the user interface, we can skip the organization role synchronization with the following configuration.
+
+```ini
+[auth.jwt]
+# ...
+
+skip_org_role_sync = true
+```
+
 ### URL login

 `url_login` allows grafana to search for a JWT in the URL query parameter