How to share an Azure Managed Grafana instance
A DevOps team may build dashboards to monitor and diagnose an application or infrastructure that it manages. Likewise, a support team may use a Grafana monitoring solution for troubleshooting customer issues. In these scenarios, multiple users will be accessing one Grafana instance. Azure Managed Grafana enables such sharing by allowing you to set the custom permissions on an instance that you own. This article explains what permissions are supported and how to grant permissions to share dashboards with your internal teams or external customers.
- An Azure account with an active subscription. Create an account for free.
- An Azure Managed Grafana instance. If you don't have one yet, create a Managed Grafana instance.
Supported Grafana roles
Azure Managed Grafana supports the Admin, Viewer and Editor roles:
- The Admin role provides full control of the instance including viewing, editing, and configuring data sources.
- The Editor role provides read-write access to the dashboards in the instance.
- The Viewer role provides read-only access to dashboards in the instance.
The Admin role is automatically assigned to the creator of a Grafana instance. More details on Admin, Editor, and Viewer roles can be found at Grafana organization roles.
Grafana user roles and assignments are fully integrated with the Azure Active Directory (Azure AD). You can add any Azure AD user or security group to a Grafana role and grant them access permissions associated with that role. You can manage these permissions from the Azure portal or the command line. This section explains how to assign users to the Viewer or Editor role in the Azure portal.
Azure Managed Grafana doesn't support personal Microsoft accounts (a.k.a., MSA) currently.
Sign in to Azure
Sign in to the Azure portal at https://portal.azure.com/ with your Azure account.
Assign an Admin, Viewer or Editor role to a user
Open your Managed Grafana instance.
Select Access control (IAM) in the navigation menu.
Click Add, then Add role assignment
Select one of the Grafana roles to assign to a user or security group. The available roles are:
- Grafana Admin
- Grafana Editor
- Grafana Viewer
Dashboard and data source level sharing will be done from within the Grafana application. Fore more details, refer to Grafana permissions.