Merge pull request #290004 from maud-lv/ml-grafanasettings

Turn into how-to doc and add CSRF setting

Author: ttorble

articles/managed-grafana/grafana-settings.md

@@ -1,41 +1,59 @@
 ---
-title: Learn about Grafana settings
+title: How to Configure Grafana Settings
 titleSuffix: "Azure Managed Grafana"
-description: Learn about Grafana settings in Azure Managed Grafana, including Viewers can Edit and External Enabled.
+description: Learn how to configure Grafana settings in Azure Managed Grafana, including enabling Viewers can Edit and External Enabled.
 author: maud-lv
 ms.author: malev
 ms.service: azure-managed-grafana
-ms.topic: concept-article
-ms.date: 08/09/2024
-#customer intent: In this document, learn about the custom Grafana options available in the Grafana settings tab, in Azure Managed Grafana.
+ms.topic: how-to
+ms.date: 11/06/2024
+#customer intent: In this document, learn how to configure the custom Grafana options available in the Grafana settings tab, in Azure Managed Grafana.
 
 ---
 
-# Grafana settings
+# How to configure Grafana settings
 
-This article introduces the Grafana settings available in Azure Managed Grafana. These settings are designed to enable Azure Managed Grafana customers to customize their Grafana instances by enabling or disabling the Grafana options listed below.
+This article provides step-by-step instructions on how to configure Grafana settings in Azure Managed Grafana. These settings allow you to customize your Grafana instance by enabling or disabling specific options. These Grafana settings are also referenced in Grafana's documentation, under [Grafana configuration](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/).
 
-These settings are located in Azure Managed Grafana's **Settings** > **Configuration** menu, in the **Grafana Settings (Preview)** tab.
+## Prerequisites
 
-:::image type="content" source="media/grafana-settings/grafana-settings-tab.png" alt-text="Screenshot of the Azure platform showing the Grafana settings tab." lightbox="media/grafana-settings/grafana-settings-tab.png":::
+- An Azure account with an active subscription.
+- An Azure Managed Grafana instance.
+
+## Access Grafana Settings
 
-They are also referenced in Grafana's documentation, under [Grafana configuration](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/). 
+1. Open the Azure portal and navigate to your Azure Managed Grafana instance.
+1. In the left menu, select **Settings** > **Configuration**.
+1. Open the **Grafana Settings** tab.
+
+:::image type="content" source="media/grafana-settings/grafana-settings-tab.png" alt-text="Screenshot of the Azure platform showing the Grafana settings tab." lightbox="media/grafana-settings/grafana-settings-tab.png":::
 
 ## Viewers Can Edit
 
-The **Viewers Can Edit** setting allows users with the Grafana Viewer role to edit dashboards. This feature is designed to enable Grafana Viewers to run tests and interact with dashboards without making permanent changes. While they can edit dashboards, they can't save these edits.
+The **Viewers Can Edit** setting allows users with the Grafana Viewer role to edit dashboards without saving changes permanently. This feature is designed to enable Grafana Viewers to run tests and interact with dashboards without making permanent changes.
 
-This option also gives Grafana Viewers access to the **Explore** menu in the Grafana UI, where they can perform interactive queries and analyze data within Grafana. However, it's important to note that any changes made by Viewers won't be saved permanently unless they have the appropriate Editor permissions.
+With this setting enabled, Grafana Viewers can:
+- Edit dashboards temporarily, without saving.
+- Access the **Explore** menu to perform interactive queries and analyze data.
 
-To enable or disable this option, open an Azure Managed Grafana instance in the Azure portal and go to **Settings** > **Configuration** > **Grafana Settings (Preview)** > **Viewers can edit**. This option is disabled by default.
+1. In the **Grafana Settings** tab, locate the **Viewers Can Edit** option.
+1. This option is disabled by default. Toggle the switch to enable this setting.
 
 ## External Enabled
 
-The **External Enabled** setting controls the public sharing of snapshots. This option is enabled by default, allowing users to publish snapshots of their dashboards. 
+The **External Enabled** setting controls the public sharing of snapshots.
+
+With this setting enabled, users can publish snapshots of dashboards to an external URL by opening a dashboard, selecting **Share** > **Snapshot** > **Publish to snapshots.raintanks.io**.
+
+1. In the **Grafana Settings** tab, locate the **External Enabled** option.
+1. This option is enabled by default, allowing users to publicly share snapshots of their dashboards. To restrict the public sharing of snapshots, toggle off the switch to disable this setting.
+
+## CSRF Always Check
 
-With this option enabled, users can publish a snapshot of a dashboard to an external URL by opening a dashboard, selecting **Share** > **Snapshot**, and then **Publish to snapshots.raintanks.io**.
+The **CSRF Always Check** setting enhances security by rejecting requests that have an origin header that does not match the origin of the Grafana instance. This setting helps to prevent Cross-Site Request Forgery (CSRF) attacks. This option is disabled by default.
 
-You can disable the External Enabled option to restrict the public sharing of snapshots. To do this, open an Azure Managed Grafana instance in the Azure portal and go to **Settings** > **Configuration** > **Grafana Settings (Preview)** and toggle off the **External Enabled** setting.
+1. In the **Grafana Settings** tab, locate the **CSRF Always Check** option.
+1. Toggle the switch to enable or disable this setting based on your security requirements.
 
 ## Related content
 

articles/managed-grafana/index.yml

@@ -81,7 +81,7 @@ landingContent:
             url: how-to-set-up-private-access.md
           - text: Call Grafana APIs programmatically
             url: how-to-api-calls.md
-          - text: Grafana settings
+          - text: Configure Grafana settings
             url: grafana-settings.md
           - text: Use deterministic outbound IPs
             url: how-to-deterministic-ip.md

articles/managed-grafana/media/grafana-settings/grafana-settings-tab.png

@@ -28,8 +28,6 @@ items:
     href: high-availability.md
   - name: Encryption
     href: encryption.md
-  - name: Grafana settings
-    href: grafana-settings.md
   - name: Azure RBAC  
     href: concept-role-based-access-control.md
 - name: How-to guides
@@ -98,6 +96,8 @@ items:
       href: how-to-monitor-managed-grafana-workspace.md
   - name: Migrate to Azure Managed Grafana
     href: how-to-migrate.md
+  - name: Configure Grafana settings
+    href: grafana-settings.md
   - name: Troubleshoot common issues
     href: troubleshoot-managed-grafana.md
 - name: Reference