From d6ca11110906d98ee08dd98ffff9a5a1869027cb Mon Sep 17 00:00:00 2001 From: "Grot (@grafanabot)" <43478413+grafanabot@users.noreply.github.com> Date: Fri, 18 Nov 2022 13:43:32 -0500 Subject: [PATCH] [v9.3.x] Docs: adds permission validation setting (#58988) Docs: adds permission validation setting (#58970) * adds permission validation setting * Update docs/sources/administration/roles-and-permissions/access-control/configure-rbac/index.md Co-authored-by: Misi * makes prettier Co-authored-by: Misi (cherry picked from commit 780efa57917c2951054a7558710e53d19f140f22) Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --- .../access-control/configure-rbac/index.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/sources/administration/roles-and-permissions/access-control/configure-rbac/index.md b/docs/sources/administration/roles-and-permissions/access-control/configure-rbac/index.md index 99cbacf35a9..05f9e61cbce 100644 --- a/docs/sources/administration/roles-and-permissions/access-control/configure-rbac/index.md +++ b/docs/sources/administration/roles-and-permissions/access-control/configure-rbac/index.md @@ -14,9 +14,10 @@ weight: 30 The table below describes all RBAC configuration options. Like any other Grafana configuration, you can apply these options as [environment variables]({{< relref "../../../../setup-grafana/configure-grafana/#configure-with-environment-variables" >}}). -| Setting | Required | Description | Default | -| ------------------ | -------- | ---------------------------------------------------------------------------- | ------- | -| `permission_cache` | No | Enable to use in memory cache for loading and evaluating users' permissions. | `true` | +| Setting | Required | Description | Default | +| ------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- | +| `permission_cache` | No | Enable to use in memory cache for loading and evaluating users' permissions. | `true` | +| `permission_validation_enabled` | No | Grafana enforces validation for permissions when a user creates or updates a role. The system checks the internal list of scopes and actions for each permission to determine they are valid. By default, if a scope or action is not recognized, Grafana logs a warning message. When set to `true`, Grafana returns an error. | `false` | ## Example RBAC configuration