opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-08-03 05:37:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

Docs: Clarify when force_use_graph_api is required for Azure (#97844)

Browse Source
This commit is contained in:
Vardan Torosyan
2024-12-12 15:17:46 +01:00
committed by GitHub
parent 2182f4829e
commit 63d3cf93fe
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md
View File

@ -380,6 +380,8 @@ Entra ID does not emit the groups claim in the token and emits a group overage c
If Grafana receives a token with a group overage claim instead of a groups claim,
Grafana attempts to retrieve the user's group membership by calling the included endpoint.
To ensure this functionality works correctly, you must enable [`force_use_graph_api`]({{< relref "./#force-fetching-groups-from-microsoft-graph-api" >}}) in your configuration.
{{% admonition type="note" %}}
The 'App registration' must include the `GroupMember.Read.All` API permission for group overage claim calls to succeed.