Auth: Add documentation references to No Basic role (#72880)

* Update the documentation

* Add references to the documentation

* Replace X with YES in roles table
This commit is contained in:
linoman
2023-08-04 16:29:24 +02:00
committed by GitHub
parent 95760cb021
commit 01721d910e
5 changed files with 59 additions and 28 deletions

View File

@@ -79,26 +79,27 @@ Grafana uses the following roles to control user access:
- **Organization administrator**: Has access to all organization resources, including dashboards, users, and teams.
- **Editor**: Can view and edit dashboards, folders, and playlists.
- **Viewer**: Can view dashboards and playlists.
- **No Basic Role**: Has no permissions. Permissions will be added with RBAC as needed.
The following table lists permissions for each role.
| Permission | Organization administrator | Editor | Viewer |
| :----------------------------- | :------------------------: | :----: | :----: |
| View dashboards | x | x | x |
| Add, edit, delete dashboards | x | x | |
| Add, edit, delete folders | x | x | |
| View playlists | x | x | x |
| Add, edit, delete playlists | x | x | |
| Create library panels | x | x | |
| View annotations | x | x | x |
| Add, edit, delete annotations | x | x | |
| Access Explore | x | x | |
| Add, edit, delete data sources | x | | |
| Add and edit users | x | | |
| Add and edit teams | x | | |
| Change organizations settings | x | | |
| Change team settings | x | | |
| Configure application plugins | x | | |
| Permission | Organization administrator | Editor | Viewer | No Basic Role |
| :----------------------------- | :------------------------: | :----: | :----: | :-----------: |
| View dashboards | yes | yes | yes | |
| Add, edit, delete dashboards | yes | yes | | |
| Add, edit, delete folders | yes | yes | | |
| View playlists | yes | yes | yes | |
| Add, edit, delete playlists | yes | yes | | |
| Create library panels | yes | yes | | |
| View annotations | yes | yes | yes | |
| Add, edit, delete annotations | yes | yes | | |
| Access Explore | yes | yes | | |
| Add, edit, delete data sources | yes | | | |
| Add and edit users | yes | | | |
| Add and edit teams | yes | | | |
| Change organizations settings | yes | | | |
| Change team settings | yes | | | |
| Configure application plugins | yes | | | |
## Dashboard permissions

View File

@@ -120,6 +120,10 @@ You can assign roles to a service account using the Grafana UI or via the API. F
In [Grafana Enterprise]({{< relref "../../introduction/grafana-enterprise/" >}}), you can also [assign RBAC roles]({{< relref "../roles-and-permissions/access-control/assign-rbac-roles" >}}) to grant very specific permissions to applications that interact with Grafana.
{{% admonition type="note" %}}
Since Grafana 10.2.0, the `No Basic Role` is available for organization users or service accounts. This role has no permissions. Permissions can be granted with RBAC.
{{% /admonition %}}
### Before you begin
- Ensure you have permission to update service accounts roles. By default, the organization administrator role is required to update service accounts permissions. For more information about user permissions, refer to [About users and permissions]({{< relref "../roles-and-permissions/#" >}}).