You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/managed-grafana/concept-role-based-access-control.md
+8-10Lines changed: 8 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,34 +10,32 @@ ms.date: 06/28/2024
10
10
ms.author: malev
11
11
---
12
12
13
-
# Azure Managed Grafana access control
13
+
# Azure role-based access control within Azure Managed Grafana
14
14
15
-
# Azure role-based access control
16
-
17
-
Azure Managed Grafana supports [Azure role-based access control (RBAC)](../../role-based-access-control/index.yml), an authorization system that lets you manage individual access to your Azure resources.
15
+
Azure Managed Grafana supports [Azure role-based access control (RBAC)](../role-based-access-control/index.yml), an authorization system that lets you manage individual access to your Azure resources.
18
16
19
17
Azure RBAC enables you to allocate varying permission levels to users, groups, service principals, or managed identities, for managing your Azure Managed Grafana resources.
20
18
21
-
# Azure Managed Grafana roles
19
+
##Azure Managed Grafana roles
22
20
23
21
The following built-in roles are available in Azure Managed Grafana, each providing different levels of access:
24
22
25
23
> [!div class="mx-tableFixed"]
26
24
> | Built-in role | Description | ID |
27
25
> | --- | --- | --- |
28
-
> | <aname='grafana-admin'></a>[Grafana Admin](./built-in-roles/monitor.md#grafana-admin)| Perform all Grafana operations, including the ability to manage data sources, create dashboards, and manage role assignments within Grafana. | 22926164-76b3-42b3-bc55-97df8dab3e41 |
29
-
> | <aname='grafana-editor'></a>[Grafana Editor](./built-in-roles/monitor.md#grafana-editor)| View and edit a Grafana instance, including its dashboards and alerts. | a79a5197-3a5c-4973-a920-486035ffd60f |
30
-
> | <aname='grafana-viewer'></a>[Grafana Viewer](./built-in-roles/monitor.md#grafana-viewer)| View a Grafana instance, including its dashboards and alerts. | 60921a7e-fef1-4a43-9b16-a26c52ad4769 |
26
+
> | <aname='grafana-admin'></a>[Grafana Admin](../role-based-access-control/built-in-roles/monitor.md#grafana-admin)| Perform all Grafana operations, including the ability to manage data sources, create dashboards, and manage role assignments within Grafana. | 22926164-76b3-42b3-bc55-97df8dab3e41 |
27
+
> | <aname='grafana-editor'></a>[Grafana Editor](../role-based-access-control/built-in-roles/monitor.md#grafana-editor)| View and edit a Grafana instance, including its dashboards and alerts. | a79a5197-3a5c-4973-a920-486035ffd60f |
28
+
> | <aname='grafana-viewer'></a>[Grafana Viewer](../role-based-access-control/built-in-roles/monitor.md#grafana-viewer)| View a Grafana instance, including its dashboards and alerts. | 60921a7e-fef1-4a43-9b16-a26c52ad4769 |
31
29
32
30
To access the Grafana user interface, users must possess one of these roles.
33
31
34
32
These permissions are included within the broader roles of resource group Contributor and resource group Owner roles. If you're not a resource group Contributor or resource group Owner, a User Access Administrator, you will need to ask a subscription Owner or resource group Owner to grant you one of the Grafana roles on the resource you want to access.
35
33
36
34
## Adding a role assignment to an Azure Managed Grafana resource
37
35
38
-
To add a role assignment to an Azure Managed Grafana instance, in your Azure Managed Grafana workspace, open the **Access control (IAM)** menu and select **Add** > **Add new role assignment**.
36
+
To add a role assignment to an Azure Managed Grafana instance, in your Azure Managed Grafana workspace, open the **Access control (IAM)** menu and select **Add** > **Add role assignment**.
39
37
40
-
:::image type="content" source="media/azure-ad-group-sync/add-role-assignment.png" alt-text="Screenshot of the Azure portal. Adding a new role assignment.":::
38
+
:::image type="content" source="media/azure-ad-group-sync/add-role-assignment.png" alt-text="Screenshot of the Azure portal. Adding a new role assignment.":::
41
39
42
40
Assign a role, such as **Grafana viewer**, to a user, group, service principal or managed identity. For more information about assigning a role, go to [Grant access](../role-based-access-control/quickstart-assign-role-user-portal.md#grant-access).
0 commit comments