public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Docs: Clarify when force_use_graph_api is required for Azure (#97844)

Browse Source
This commit is contained in:
Vardan Torosyan
2024-12-12 15:17:46 +01:00
committed by GitHub
parent 2182f4829e
commit 63d3cf93fe
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md
+2
View File
@@ -380,6 +380,8 @@ Entra ID does not emit the groups claim in the token and emits a group overage c
If Grafana receives a token with a group overage claim instead of a groups claim, If Grafana receives a token with a group overage claim instead of a groups claim,
Grafana attempts to retrieve the user's group membership by calling the included endpoint. Grafana attempts to retrieve the user's group membership by calling the included endpoint.
To ensure this functionality works correctly, you must enable [`force_use_graph_api`]({{< relref "./#force-fetching-groups-from-microsoft-graph-api" >}}) in your configuration.
{{% admonition type="note" %}} {{% admonition type="note" %}}
The 'App registration' must include the `GroupMember.Read.All` API permission for group overage claim calls to succeed. The 'App registration' must include the `GroupMember.Read.All` API permission for group overage claim calls to succeed.