IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

TeamLBAC: Add scenario 6 to the docs (#87215)

Browse Source 
* add task 6

* Apply suggestions from code review

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>

---------

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
This commit is contained in:
Eric Leijonmarck 2024-05-02 17:38:26 +01:00 committed by GitHub
parent dd9fb83606
commit cdb9eeb7fc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
docs/sources/administration/data-source-management/teamlbac/create-teamlbac-rules/index.md
View File

@ -123,3 +123,14 @@ A user that is part of Team A will have access to logs that match `namespace="de
A user that is part of Team A and part of Team B will have access to logs that match `namespace="dev"`.
A user that is not part of Team A and part of Team B, that is `Editor` or `Viewer` will have access to all logs (due to the query permission for the user).
### Task 6: User A is Admin and part of Team B
We have team B, user A is part of Team B and has an `Admin` basic role.
- Team B has no roles assigned
- Team B has Query permissions to data source Loki
- Team B has a rule `{ project_id="project-dev" }`
User A may only access logs for data source Loki that match `{ project_id="project-dev" }` and no other logs on the data source.