IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

Alerting: Update docs with rule read RBAC changes (#88565)

Browse Source 
* Remove ref to `datasources:query` for rule read

* Remove more refs to `datasources:query`

* Run prettier
This commit is contained in:
William Wernert 2024-05-31 11:50:44 -04:00 committed by GitHub
parent c582744207
commit 7a744a746b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 2 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/sources/alerting/set-up/configure-rbac/_index.md
View File

@ -42,7 +42,7 @@ Grafana Alerting has the following permissions.
| `alert.rules.external:write` | `datasources:*`<br>`datasources:uid:*` | Create, update, and delete alert rules in data sources that support alerting (Mimir and Loki). |
| `alert.rules:create` | `folders:*`<br>`folders:uid:*` | Create Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.rules:delete` | `folders:*`<br>`folders:uid:*` | Delete Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.rules:read` | `folders:*`<br>`folders:uid:*` | Read Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.rules:read` | `folders:*`<br>`folders:uid:*` | Read Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder. |
| `alert.rules:write` | `folders:*`<br>`folders:uid:*` | Update Grafana alert rules in a folder and its subfolders. Combine this permission with `folders:read` in a scope that includes the folder and `datasources:query` in the scope of data sources the user can query. |
| `alert.silences:create` | `folders:*`<br>`folders:uid:*` | Create rule-specific silences in a folder and its subfolders. |
| `alert.silences:read` | `folders:*`<br>`folders:uid:*` | Read general and rule-specific silences in a folder and its subfolders. |

18
docs/sources/alerting/set-up/configure-rbac/access-roles/index.md
View File

@ -67,7 +67,7 @@ For more information on creating custom roles, refer to [Create custom roles](ht
The following examples give you an idea of how you can combine permissions for Grafana Alerting.
A custom role for read access to alert rules that uses data source DS1 and DS2 in folder F:
A custom role for read access to alert rules in folder F:
<!-- prettier-ignore-start -->
```
@ -77,14 +77,6 @@ PUT access-control/roles
"displayName": "Alert rule reader in folder F",
"description": "Read access to rules in folder F that use DS1 and DS2",
"permissions": [
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS1"
},
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS2"
},
{
"action": "alert.rules:read",
"scope": "folders:uid:UID_F"
@ -108,14 +100,6 @@ PUT access-control/roles
"displayName": "Alert rules editor in folder F",
"description": "Edit access to rules in folder F that use DS1 and DS2",
"permissions": [
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS1"
},
{
"action": "datasources:query",
"scope": "datasources:uid:UID_DS2"
},
{
"action": "alert.rules:read",
"scope": "folders:uid:UID_F"