The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
grafana/docs/sources/permissions/datasource_permissions.md

3.4 KiB

+++ title = "Datasource Permissions" description = "Grafana Datasource Permissions Guide " keywords = ["grafana", "configuration", "documentation", "datasource", "permissions", "users", "teams", "enterprise"] type = "docs" [menu.docs] name = "Datasource" identifier = "datasource-permissions" parent = "permissions" weight = 4 +++

Datasource Permissions

Datasource Permissions is only available in Grafana Enterprise. Read more about [Grafana Enterprise]({{< relref "enterprise/index.md" >}}).

Datasource permissions allows you to restrict access for users to query a datasource. For each datasource there is a permission page that makes it possible to enable permissions and restrict query permissions to specific Users and Teams.

Restricting Access - Enable Permissions

{{< docs-imagebox img="/img/docs/enterprise/datasource_permissions_enable_still.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" animated-gif="/img/docs/enterprise/datasource_permissions_enable.gif" >}}

By default, permissions are disabled for datasources and a datasource in an organization can be queried by any user in that organization. For example a user with Viewer role can still issue any possible query to a datasource, not just those queries that exist on dashboards he/she has access to.

When permissions are enabled for a datasource in an organization you will restrict admin and query access for that datasource to admin users in that organization.

To enable permissions for a datasource:

  1. Navigate to Configuration / Data Sources.
  2. Select the datasource you want to enable permissions for.
  3. Select the Permissions tab and click on the Enable button.

Allow users and teams to query a datasource

{{< docs-imagebox img="/img/docs/enterprise/datasource_permissions_add_still.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" animated-gif="/img/docs/enterprise/datasource_permissions_add.gif" >}}

After you have enabled permissions for a datasource you can assign query permissions to users and teams which will allow access to query the datasource.

Assign query permission to users and teams:

  1. Navigate to Configuration / Data Sources.
  2. Select the datasource you want to assign query permissions for.
  3. Select the Permissions tab.
  4. click on the Add Permission button.
  5. Select Team/User and find the team/user you want to allow query access and click on the Save button.

Restore Default Access - Disable Permissions

{{< docs-imagebox img="/img/docs/enterprise/datasource_permissions_disable_still.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" animated-gif="/img/docs/enterprise/datasource_permissions_disable.gif" >}}

If you have enabled permissions for a datasource and want to return datasource permissions to the default, i.e. datasource can be queried by any user in that organization, you can disable permissions with a click of a button. Note that all existing permissions created for datasource will be deleted.

To disable permissions for a datasource:

  1. Navigate to Configuration / Data Sources.
  2. Select the datasource you want to disable permissions for.
  3. Select the Permissions tab and click on the Disable Permissions button.