Edit

How to share an Azure Managed Grafana instance

  • Article
  • 2 minutes to read

A DevOps team may build dashboards to monitor and diagnose an application or infrastructure that it manages. Likewise, a support team may use a Grafana monitoring solution for troubleshooting customer issues. In these scenarios, multiple users will be accessing one Grafana instance. Azure Managed Grafana enables such sharing by allowing you to set the custom permissions on an instance that you own. This article explains what permissions are supported and how to grant permissions to share dashboards with your internal teams or external customers.

Prerequisites

Supported Grafana roles

Azure Managed Grafana supports the Admin, Viewer and Editor roles:

  • The Admin role provides full control of the instance including viewing, editing, and configuring data sources.
  • The Editor role provides read-write access to the dashboards in the instance.
  • The Viewer role provides read-only access to dashboards in the instance.

The Admin role is automatically assigned to the creator of a Grafana instance. More details on Admin, Editor, and Viewer roles can be found at Grafana organization roles.

Grafana user roles and assignments are fully integrated with the Azure Active Directory (Azure AD). You can add any Azure AD user or security group to a Grafana role and grant them access permissions associated with that role. You can manage these permissions from the Azure portal or the command line. This section explains how to assign users to the Viewer or Editor role in the Azure portal.

Note

Azure Managed Grafana doesn't support personal Microsoft accounts (a.k.a., MSA) currently.

Sign in to Azure

Sign in to the Azure portal at https://portal.azure.com/ with your Azure account.

Assign an Admin, Viewer or Editor role to a user

  1. Open your Managed Grafana instance.

  2. Select Access control (IAM) in the navigation menu.

  3. Click Add, then Add role assignment

    Screenshot of Add role assignment in the Azure platform.

  4. Select one of the Grafana roles to assign to a user or security group. The available roles are:

    • Grafana Admin
    • Grafana Editor
    • Grafana Viewer

    Screenshot of the Grafana roles in the Azure platform.

Note

Dashboard and data source level sharing will be done from within the Grafana application. Fore more details, refer to Grafana permissions.

Next steps

Configure data sources

Modify access permissions to Azure Monitor

Call Grafana APIs in your automation