You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/managed-grafana/how-to-authentication-permissions.md
+10-9Lines changed: 10 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ ms.author: malev
8
8
ms.date: 10/08/2024
9
9
---
10
10
11
-
# Set up Azure Managed Grafana authentication and permissions (preview)
11
+
# Set up Azure Managed Grafana authentication and permissions
12
12
13
13
To process data, Azure Managed Grafana needs permission to access data sources. In this guide, learn how to set up authentication in an Azure Managed Grafana instance, so that Grafana can access data sources using a managed identity or a service principal. This guide also introduces the action of adding a Monitoring Reader role assignment on the target subscription to provide read-only access to monitoring data across all resources within the subscription.
14
14
@@ -24,11 +24,11 @@ The system-assigned managed identity is the default authentication method provid
24
24
25
25
To enable a system-assigned managed identity:
26
26
27
-
1. Go to **Settings** > **Identity (Preview)**.
28
-
1. In the **System assigned (Preview)** tab, set the status for **System assigned** to **On**.
27
+
1. Go to **Settings** > **Identity**.
28
+
1. In the **System assigned** tab, set the status for **System assigned** to **On**.
29
29
30
30
> [!NOTE]
31
-
> Assigning multiple managed identities to a single Azure Managed Grafana resource isn't possible. If a user-assigned managed identity is already assigned to the Azure Managed Grafana resource, you must first remove the assignment from the **User assigned (Preview)** tab before you can enable the system-assigned managed identity.
31
+
> Assigning multiple managed identities to a single Azure Managed Grafana resource isn't possible. If a user-assigned managed identity is already assigned to the Azure Managed Grafana resource, you must first remove the assignment from the **User assigned** tab before you can enable the system-assigned managed identity.
32
32
33
33
> [!NOTE]
34
34
> Disabling a system-assigned managed identity is irreversible. Each time you enable a system-assigned managed identity, Azure creates a new identity.
@@ -47,18 +47,19 @@ To assign a user-assigned managed identity to a workspace, you must have the Own
47
47
48
48
To assign a user-assigned managed identity:
49
49
50
-
1. Go to **Settings** > **Identity (Preview)**.
51
-
1. In the **User assigned (Preview)** tab, select **Add**.
50
+
1. Go to **Settings** > **Identity**.
51
+
1. In the **User assigned** tab, select **Add**.
52
52
53
53
> [!NOTE]
54
-
> Assigning multiple managed identities to a single Azure Managed Grafana resource isn't possible. You can only use one managed identity per resource. If a system-assigned identity is enabled, you must first disable it from the **System assigned (Preview)** tab before you can enable the user-assigned identity.
54
+
> Assigning multiple managed identities to a single Azure Managed Grafana resource isn't possible. You can only use one managed identity per resource. If a system-assigned identity is enabled, you must first disable it from the **System assigned** tab before you can enable the user-assigned identity.
55
55
56
56
1. In the side panel, select a subscription and an identity, then select **Add**.
57
-
1. Once the identity is successfully added, open it by selecting its name and go to **Azure role assignments** to assign it the **Monitoring Reader** role on the target subscription.
58
-
1. When done, select **Save**
59
57
60
58
:::image type="content" source="media/authentication/user-assigned-managed-identity.png" alt-text="Screenshot of the Azure portal. Enabling a user-assigned managed identity.":::
61
59
60
+
1. Once the identity is successfully added, open it by selecting its name and go to **Azure role assignments** to assign it the **Monitoring Reader** role on the target subscription.
61
+
1. When done, select **Save**
62
+
62
63
> [!NOTE]
63
64
> You can only assign one user-assigned managed identity per Azure Managed Grafana instance.
0 commit comments