From cdb9eeb7fc14a7889e7808558756d62c6f680e9b Mon Sep 17 00:00:00 2001 From: Eric Leijonmarck Date: Thu, 2 May 2024 17:38:26 +0100 Subject: [PATCH] TeamLBAC: Add scenario 6 to the docs (#87215) * add task 6 * Apply suggestions from code review Co-authored-by: Ieva --------- Co-authored-by: Ieva --- .../teamlbac/create-teamlbac-rules/index.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md b/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md index f19fa06ec0f..c52d8e79e86 100644 --- a/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md +++ b/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md @@ -123,3 +123,14 @@ A user that is part of Team A will have access to logs that match `namespace="de A user that is part of Team A and part of Team B will have access to logs that match `namespace="dev"`. A user that is not part of Team A and part of Team B, that is `Editor` or `Viewer` will have access to all logs (due to the query permission for the user). + +### Task 6: User A is Admin and part of Team B + +We have team B, user A is part of Team B and has an `Admin` basic role. + +- Team B has no roles assigned +- Team B has Query permissions to data source Loki + +- Team B has a rule `{ project_id="project-dev" }` + +User A may only access logs for data source Loki that match `{ project_id="project-dev" }` and no other logs on the data source.