Jack Baldry
3c68684dd2
* Use relative aliases for all non-current Grafana aliases Prevents non-latest documentation "stealing" the page away from latest and through permanent redirects for latest pages that no longer exist. The redirected pages are indexed by search engines but our robots.txt forbids them crawling the non-latest page. Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Remove all current page aliases find docs/sources -type f -name '*.md' -exec sed -z -i 's#\n *- /docs/grafana/next/[^\n]*\n#\n#' {} \; find docs/sources -type f -name '*.md' -exec sed -z -i 's#\n *- /docs/grafana/latest/[^\n]*\n#\n#' {} \; find docs/sources -type f -name '*.md' -exec sed -Ez -i 's#\n((aliases:\n *-)|aliases:\n)#\n\2#' {} \; Signed-off-by: Jack Baldry <jack.baldry@grafana.com> Signed-off-by: Jack Baldry <jack.baldry@grafana.com>
75 lines
3.4 KiB
Markdown
75 lines
3.4 KiB
Markdown
---
|
|
aliases:
|
|
- ../enterprise/datasource_permissions/
|
|
- /docs/sources/permissions/datasource_permissions/
|
|
description: Grafana Datasource Permissions Guide
|
|
keywords:
|
|
- grafana
|
|
- configuration
|
|
- documentation
|
|
- datasource
|
|
- permissions
|
|
- users
|
|
- teams
|
|
- enterprise
|
|
title: Data source permissions
|
|
weight: 500
|
|
---
|
|
|
|
# Data source permissions
|
|
|
|
Data source permissions allow you to restrict access for users to query a data source. For each data source there is a permission page that allows you to enable permissions and restrict query permissions to specific **Users** and **Teams**.
|
|
|
|
> **Note:** Available in [Grafana Enterprise]({{< relref "../enterprise/" >}}) and [Grafana Cloud Pro and Advanced]({{< ref "/docs/grafana-cloud" >}}).
|
|
|
|
## Enable data source permissions
|
|
|
|
{{< figure src="/static/img/docs/enterprise/datasource_permissions_enable_still.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" animated-gif="/static/img/docs/enterprise/datasource_permissions_enable.gif" >}}
|
|
|
|
By default, data sources in an organization can be queried by any user in that organization. For example, a user with the `Viewer` role can issue any possible query to a data source, not just
|
|
queries that exist on dashboards they have access to.
|
|
|
|
When permissions are enabled for a data source in an organization, the user who created the datasource can edit the datasource and in addition, viewers can query the datasource.
|
|
|
|
**Enable permissions for a data source:**
|
|
|
|
1. Navigate to **Configuration > Data Sources**.
|
|
1. Select the data source you want to enable permissions for.
|
|
1. On the Permissions tab, click **Enable**.
|
|
|
|
<div class="clearfix"></div>
|
|
|
|
> **Caution:** Enabling permissions for the default data source makes users not listed in the permissions unable to invoke queries. Panels using default data source will return `Access denied to data source` error for those users.
|
|
|
|
## Allow users and teams to query a data source
|
|
|
|
{{< figure src="/static/img/docs/enterprise/datasource_permissions_add_still.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" animated-gif="/static/img/docs/enterprise/datasource_permissions_add.gif" >}}
|
|
|
|
After you have enabled permissions for a data source you can assign query permissions to users and teams which will allow access to query the data source.
|
|
|
|
**Assign query permission to users and teams:**
|
|
|
|
1. Navigate to **Configuration > Data Sources**.
|
|
1. Select the data source you want to assign query permissions for.
|
|
1. On the Permissions tab, click **Add Permission**.
|
|
1. Select **Team** or **User**.
|
|
1. Select the entity you want to allow query access and then click **Save**.
|
|
|
|
<div class="clearfix"></div>
|
|
|
|
## Disable data source permissions
|
|
|
|
{{< figure src="/static/img/docs/enterprise/datasource_permissions_disable_still.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" animated-gif="/static/img/docs/enterprise/datasource_permissions_disable.gif" >}}
|
|
|
|
If you have enabled permissions for a data source and want to return data source permissions to the default, then you can disable permissions with a click of a button.
|
|
|
|
Note that _all_ existing permissions created for the data source will be deleted.
|
|
|
|
**Disable permissions for a data source:**
|
|
|
|
1. Navigate to **Configuration > Data Sources**.
|
|
1. Select the data source you want to disable permissions for.
|
|
1. On the Permissions tab, click **Disable Permissions**.
|
|
|
|
<div class="clearfix"></div>
|