public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

LBAC for data sources: PublicPreview and self serve enablement (#102276)

Browse Source 
* Publicpreview and self serve of lbac for mimir

* update from review
This commit is contained in:
Eric Leijonmarck
2025-03-27 15:44:29 +02:00
committed by GitHub
parent 3a9370083f
commit dce180acf3
6 changed files with 19 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/sources/administration/data-source-management/teamlbac/_index.md
+5 -4
View File
@@ -24,10 +24,10 @@ Label-Based Access Control (LBAC) allows fine-grained access control to data sou
LBAC for data sources is currently generally available for `Loki` and in **experimental** for `Prometheus`. Support for additional data sources may be added in future updates.
| Data source | [Grafana Cloud](/docs/grafana-cloud) | [Grafana Enterprise](../../../introduction/grafana-enterprise/) |
| ----------- | ------------------------------------ | --------------------------------------------------------------- |
| Loki | GA | GA |
| Prometheus | PrivatePreview | PrivatePreview |
| Data source | Grafana Cloud | Grafana Enterprise |
| ----------- | ------------- | --------------------------------------------------------- |
| Loki | GA | GA (requires GEL - Grafana Enterprise Logs) |
| Prometheus | PublicPreview | PublicPreview (requires GEM - Grafana Enterprise Metrics) |
{{% admonition type="note" %}}
For enterprise this feature requires Grafana Enterprise Metrics (GEM) or Grafana Enterprise Logs (GEL) to function.
@@ -73,6 +73,7 @@ To be able to use LBAC for data sources metrics, you need to enable the feature
- If an administrator is part of a team with LBAC for data sources rules, those rules are applied to the administrator requests.
- Cloud Access Policy (CAP) LBAC rules override LBAC for data sources rules.
CAP are the access controls from Grafana Cloud.
- Note that these data sources must be created manually - provisioning is not yet supported.
You must remove any label selectors from your Cloud Access Policy that is configured for the data source, otherwise the CAP label selectors override the LBAC for data sources rules. For more information about CAP label selectors, refer to [Use label-based access control (LBAC) with access policies](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/label-access-policies/).