apitech
/
grafana
mirror of https://github.com/grafana/grafana
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Alerting: Update docs with rule read RBAC changes (#88565)

Browse Source 
* Remove ref to `datasources:query` for rule read

* Remove more refs to `datasources:query`

* Run prettier
pull/88570/head
William Wernert 2 years ago committed by GitHub
parent c582744207
commit 7a744a746b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 2 additions and 18 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 2
      docs/sources/alerting/set-up/configure-rbac/_index.md
  2. 18
      docs/sources/alerting/set-up/configure-rbac/access-roles/index.md

2
docs/sources/alerting/set-up/configure-rbac/_index.md
Unescape View File

@ -42,7 +42,7 @@ Grafana Alerting has the following permissions.
| `alert.rules.external:write` | `datasources:*`<br>`datasources:uid:*` | Create, update, and delete alert rules in data sources that support alerting (Mimir and Loki). |
| `alert.rules:create` | `folders:*`<br>`folders:uid:*` | Create Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.rules:delete` | `folders:*`<br>`folders:uid:*` | Delete Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.rules:read` | `folders:*`<br>`folders:uid:*` | Read Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.rules:read` | `folders:*`<br>`folders:uid:*` | Read Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder. |
| `alert.rules:write` | `folders:*`<br>`folders:uid:*` | Update Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.silences:create` | `folders:*`<br>`folders:uid:*` | Create rule-specific silences in a folder and its subfolders. |
| `alert.silences:read` | `folders:*`<br>`folders:uid:*` | Read general and rule-specific silences in a folder and its subfolders. |

18
docs/sources/alerting/set-up/configure-rbac/access-roles/index.md
Unescape View File

@ -67,7 +67,7 @@ For more information on creating custom roles, refer to [Create custom roles](ht
The following examples give you an idea of how you can combine permissions for Grafana Alerting.
A custom role for read access to alert rules that uses data source DS1 and DS2 in folder F:
A custom role for read access to alert rules in folder F:
<!-- prettier-ignore-start -->
```
@ -77,14 +77,6 @@ PUT access-control/roles
"displayName": "Alert rule reader in folder F",
"description": "Read access to rules in folder F that use DS1 and DS2",
"permissions": [
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS1"
},
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS2"
},
{
"action": "alert.rules:read",
"scope": "folders:uid:UID_F"
@ -108,14 +100,6 @@ PUT access-control/roles
"displayName": "Alert rules editor in folder F",
"description": "Edit access to rules in folder F that use DS1 and DS2",
"permissions": [
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS1"
},
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS2"
},
{
"action": "alert.rules:read",
"scope": "folders:uid:UID_F"

Write Preview
Loading…
Cancel
Save