From ded95af136177083e0a0945e58385df5f0fba2c3 Mon Sep 17 00:00:00 2001 From: Eric Leijonmarck Date: Wed, 4 Sep 2024 11:21:29 +0100 Subject: [PATCH] LBAC for datasources: doc improvements (#92872) * LBAC for datasources: doc improvements * fixed formatting of prettier * Update docs/sources/administration/data-source-management/teamlbac/_index.md Co-authored-by: Jack Baldry --------- Co-authored-by: Jack Baldry --- .../data-source-management/teamlbac/_index.md | 6 +++++- .../teamlbac/configure-teamlbac-for-loki/index.md | 1 + .../teamlbac/create-teamlbac-rules/index.md | 3 +++ 3 files changed, 9 insertions(+), 1 deletion(-) diff --git a/docs/sources/administration/data-source-management/teamlbac/_index.md b/docs/sources/administration/data-source-management/teamlbac/_index.md index c8296dc1ef5..cda80b0cec0 100644 --- a/docs/sources/administration/data-source-management/teamlbac/_index.md +++ b/docs/sources/administration/data-source-management/teamlbac/_index.md @@ -19,7 +19,11 @@ Team Label Based Access Control (LBAC) simplifies and streamlines data source ac {{< admonition type="note" >}} Creating Team LBAC rules is available for preview for logs with Loki in Grafana Cloud. Report any unexpected behavior to the Grafana Support team. -{{< /admonition >}} + +To use Team LBAC rules you must enable the `teamHttpHeaders` feature toggle because the feature uses HTTP headers for the LBAC rules requests. + +- Be sure that you are running Grafana Enterprise. + {{< /admonition >}} You can configure user access based upon team memberships using LogQL. Team LBAC controls access to logs depending on the rules set for each team. diff --git a/docs/sources/administration/data-source-management/teamlbac/configure-teamlbac-for-loki/index.md b/docs/sources/administration/data-source-management/teamlbac/configure-teamlbac-for-loki/index.md index 90926100c78..ff8e543c7fa 100644 --- a/docs/sources/administration/data-source-management/teamlbac/configure-teamlbac-for-loki/index.md +++ b/docs/sources/administration/data-source-management/teamlbac/configure-teamlbac-for-loki/index.md @@ -19,6 +19,7 @@ Team LBAC is available in private preview on Grafana Cloud for Loki created with To be able to use Team LBAC rules, you need to enable the feature toggle `teamHttpHeaders` on your Grafana instance. Contact support to enable the feature toggle for you. +- Be sure that you are running Grafana Enterprise. - Be sure that you have the permission setup to create a loki tenant in Grafana Cloud - Be sure that you have admin data source permissions for Grafana. diff --git a/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md b/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md index c52d8e79e86..3cb872a8ed4 100644 --- a/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md +++ b/docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md @@ -18,6 +18,9 @@ Team LBAC is available on Cloud for data sources created with basic authenticati ## Before you begin +To be able to use Team LBAC rules, you need to enable the feature toggle `teamHttpHeaders` on your Grafana instance. Contact support to enable the feature toggle for you. + +- Be sure that you are running Grafana Enterprise. - Be sure that you have admin data source permissions for Grafana. - Be sure that you have a team setup in Grafana.