RBAC: Update the docs homepage to mention that RBAC is only enterprise (#52890)
* RBAC: Update the docs homepage to mention that RBAC is only enterprise * Don't mention that there is anything to enable for provisioning RBAC * Add GE notices to child RBAC pages * Extend the RBAC availibility note to Cloud Advanced Co-authored-by: Garrett Guillotte <garrett.guillotte@grafana.com>
This commit is contained in:
co-authored by
Garrett Guillotte
parent
9e841ef21d
commit
532741a8fe
@@ -14,6 +14,8 @@ weight: 120
|
|||||||
|
|
||||||
# Role-based access control (RBAC)
|
# Role-based access control (RBAC)
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
RBAC provides a standardized way of granting, changing, and revoking access when it comes to viewing and modifying Grafana resources, such as dashboards, reports, and administrative settings.
|
RBAC provides a standardized way of granting, changing, and revoking access when it comes to viewing and modifying Grafana resources, such as dashboards, reports, and administrative settings.
|
||||||
|
|
||||||
{{< section >}}
|
{{< section >}}
|
||||||
|
|||||||
@@ -11,6 +11,8 @@ weight: 40
|
|||||||
|
|
||||||
# Assign RBAC roles
|
# Assign RBAC roles
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
In this topic you'll learn how to use the role picker, provisioning, and the HTTP API to assign fixed and custom roles to users and teams.
|
In this topic you'll learn how to use the role picker, provisioning, and the HTTP API to assign fixed and custom roles to users and teams.
|
||||||
|
|
||||||
## Assign fixed roles in the UI using the role picker
|
## Assign fixed roles in the UI using the role picker
|
||||||
|
|||||||
@@ -9,6 +9,8 @@ weight: 30
|
|||||||
|
|
||||||
# Configure RBAC in Grafana
|
# Configure RBAC in Grafana
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
The table below describes all RBAC configuration options. Like any other Grafana configuration, you can apply these options as [environment variables]({{< relref "../../../setup-grafana/configure-grafana/#configure-with-environment-variables" >}}).
|
The table below describes all RBAC configuration options. Like any other Grafana configuration, you can apply these options as [environment variables]({{< relref "../../../setup-grafana/configure-grafana/#configure-with-environment-variables" >}}).
|
||||||
|
|
||||||
| Setting | Required | Description | Default |
|
| Setting | Required | Description | Default |
|
||||||
|
|||||||
+2
@@ -10,6 +10,8 @@ weight: 80
|
|||||||
|
|
||||||
# RBAC permissions, actions, and scopes
|
# RBAC permissions, actions, and scopes
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
A permission is comprised of an action and a scope. When creating a custom role, consider the actions the user can perform and the resource(s) on which they can perform those actions.
|
A permission is comprised of an action and a scope. When creating a custom role, consider the actions the user can perform and the resource(s) on which they can perform those actions.
|
||||||
|
|
||||||
To learn more about the Grafana resources to which you can apply RBAC, refer to [Resources with RBAC permissions]({{< relref "../#fixed-roles" >}}).
|
To learn more about the Grafana resources to which you can apply RBAC, refer to [Resources with RBAC permissions]({{< relref "../#fixed-roles" >}}).
|
||||||
|
|||||||
@@ -12,6 +12,8 @@ weight: 50
|
|||||||
|
|
||||||
# Manage RBAC roles
|
# Manage RBAC roles
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
This section includes instructions for how to view permissions associated with roles, create custom roles, and update and delete roles.
|
This section includes instructions for how to view permissions associated with roles, create custom roles, and update and delete roles.
|
||||||
|
|
||||||
The following example includes the base64 username:password Basic Authorization. You cannot use authorization tokens in the request.
|
The following example includes the base64 username:password Basic Authorization. You cannot use authorization tokens in the request.
|
||||||
|
|||||||
+2
@@ -11,6 +11,8 @@ weight: 20
|
|||||||
|
|
||||||
# Plan your RBAC rollout strategy
|
# Plan your RBAC rollout strategy
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
An RBAC rollout strategy helps you determine _how_ you want to implement RBAC prior to assigning RBAC roles to users and teams.
|
An RBAC rollout strategy helps you determine _how_ you want to implement RBAC prior to assigning RBAC roles to users and teams.
|
||||||
|
|
||||||
Your rollout strategy should help you answer the following questions:
|
Your rollout strategy should help you answer the following questions:
|
||||||
|
|||||||
+2
@@ -11,6 +11,8 @@ weight: 70
|
|||||||
|
|
||||||
# RBAC role definitions
|
# RBAC role definitions
|
||||||
|
|
||||||
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
The following tables list permissions associated with basic and fixed roles.
|
The following tables list permissions associated with basic and fixed roles.
|
||||||
|
|
||||||
## Basic role assignments
|
## Basic role assignments
|
||||||
|
|||||||
+2
-2
@@ -10,9 +10,9 @@ weight: 60
|
|||||||
|
|
||||||
# Grafana RBAC provisioning
|
# Grafana RBAC provisioning
|
||||||
|
|
||||||
You can create, change or remove [Custom roles]({{< relref "./manage-rbac-roles/#create-custom-roles-using-provisioning" >}}) and create or remove [basic role assignments]({{< relref "./assign-rbac-roles/#assign-a-fixed-role-to-a-basic-role-using-provisioning" >}}), by adding one or more YAML configuration files in the `provisioning/access-control/` directory.
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../../enterprise/" >}}) and [Grafana Cloud Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
||||||
|
|
||||||
If you choose to use provisioning to assign and manage role, you must first enable it.
|
You can create, change or remove [Custom roles]({{< relref "./manage-rbac-roles/#create-custom-roles-using-provisioning" >}}) and create or remove [basic role assignments]({{< relref "./assign-rbac-roles/#assign-a-fixed-role-to-a-basic-role-using-provisioning" >}}), by adding one or more YAML configuration files in the `provisioning/access-control/` directory.
|
||||||
|
|
||||||
Grafana performs provisioning during startup. After you make a change to the configuration file, you can reload it during runtime. You do not need to restart the Grafana server for your changes to take effect.
|
Grafana performs provisioning during startup. After you make a change to the configuration file, you can reload it during runtime. You do not need to restart the Grafana server for your changes to take effect.
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user