TeamLBAC: Add scenario 6 to the docs (#87215)

* add task 6

* Apply suggestions from code review

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>

---------

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
pull/87264/head
Eric Leijonmarck 2 years ago committed by GitHub
parent dd9fb83606
commit cdb9eeb7fc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 11
      docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md

@ -123,3 +123,14 @@ A user that is part of Team A will have access to logs that match `namespace="de
A user that is part of Team A and part of Team B will have access to logs that match `namespace="dev"`.
A user that is not part of Team A and part of Team B, that is `Editor` or `Viewer` will have access to all logs (due to the query permission for the user).
### Task 6: User A is Admin and part of Team B
We have team B, user A is part of Team B and has an `Admin` basic role.
- Team B has no roles assigned
- Team B has Query permissions to data source Loki
- Team B has a rule `{ project_id="project-dev" }`
User A may only access logs for data source Loki that match `{ project_id="project-dev" }` and no other logs on the data source.

Loading…
Cancel
Save