Grot (@grafanabot)
333c1da5c7
* added errors in plugin list.
* added error to details page.
* adding badge on details page.
* added some more tests.
* Renamed to disabled and will handle the scenario in the plugin catalog.
* Update public/app/features/plugins/admin/components/PluginDetailsDisabledError.tsx
Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com>
* fixing some nits
* added missing isDisabeld to the mock.
* adding tests to verify scenarios when plugin is disabled.
* fixed issue with formatting after file changed on GH.
Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com>
(cherry picked from commit f3002931f4)
Co-authored-by: Marcus Andersson <marcus.andersson@grafana.com>
11 KiB
11 KiB
+++ title = "Fine-grained access control references" description = "Refer to fine-grained access control references" keywords = ["grafana", "fine-grained-access-control", "roles", "fixed-roles", "built-in-role-assignments", "permissions", "enterprise"] weight = 130 +++
Fine-grained access control references
The reference information that follows complements conceptual information about [Roles]({{< relref "./roles.md" >}}).
Fine-grained access fixed roles
| Fixed roles | Permissions | Descriptions |
|---|---|---|
fixed:permissions:admin:read |
roles:readroles:listroles.builtin:list |
Allows to list and get available roles and built-in role assignments. |
fixed:permissions:admin:edit |
All permissions from fixed:permissions:admin:read and roles:writeroles:deleteroles.builtin:addroles.builtin:remove |
Allows every read action and in addition allows to create, change and delete custom roles and create or remove built-in role assignments. |
fixed:provisioning:admin |
provisioning:reload |
Allow provisioning configurations to be reloaded. |
fixed:reporting:admin:read |
reports:readreports:sendreports.settings:read |
Allows to read reports and report settings. |
fixed:reporting:admin:edit |
All permissions from fixed:reporting:admin:read and reports.admin:writereports:deletereports.settings:write |
Allows every read action for reports and in addition allows to administer reports. |
fixed:users:admin:read |
users.authtoken:listusers.quotas:listusers:readusers.teams:read |
Allows to list and get users and related information. |
fixed:users:admin:edit |
All permissions from fixed:users:admin:read and users.password:updateusers:writeusers:createusers:deleteusers:enableusers:disableusers.permissions:updateusers:logoutusers.authtoken:updateusers.quotas:update |
Allows every read action for users and in addition allows to administer users. |
fixed:users:org:read |
org.users:read |
Allows to get user organizations. |
fixed:users:org:edit |
All permissions from fixed:users:org:read and org.users:addorg.users:removeorg.users.role:update |
Allows every read action for user organizations and in addition allows to administer user organizations. |
fixed:ldap:admin:read |
ldap.user:readldap.status:read |
Allows to read LDAP information and status. |
fixed:ldap:admin:edit |
All permissions from fixed:ldap:admin:read and ldap.user:syncldap.config:reload |
Allows every read action for LDAP and in addition allows to administer LDAP. |
fixed:server:admin:read |
server.stats:read |
Read server stats |
fixed:settings:admin:read |
settings:read |
Read settings |
fixed:settings:admin:edit |
All permissions from fixed:settings:admin:read andsettings:write |
Update settings |
fixed:datasource:editor:read |
datasources:explore |
Explore datasources |
Default built-in role assignments
| Built-in role | Associated role | Description |
|---|---|---|
| Grafana Admin | fixed:permissions:admin:editfixed:permissions:admin:readfixed:provisioning:adminfixed:reporting:admin:editfixed:reporting:admin:readfixed:users:admin:editfixed:users:admin:readfixed:users:org:editfixed:users:org:readfixed:ldap:admin:editfixed:ldap:admin:readfixed:server:admin:readfixed:settings:admin:readfixed:settings:admin:edit |
Allow access to the same resources and permissions the [Grafana server administrator]({{< relref "../../permissions/_index.md#grafana-server-admin-role" >}}) has by default. |
| Admin | fixed:users:org:editfixed:users:org:readfixed:reporting:admin:editfixed:reporting:admin:read |
Allow access to the same resources and permissions that the [Grafana organization administrator]({{< relref "../../permissions/organization_roles.md" >}}) has by default. |
| Editor | fixed:datasource:editor:read |