mirror of
https://github.com/grafana/grafana.git
synced 2025-07-30 19:22:25 +08:00

* removed overview.md * content updates * Update datasource_permissions.md * update content * content updates * Update organization_roles.md * Update docs/sources/enterprise/saml.md Co-authored-by: Kyle Brandt <kyle@grafana.com> * Update dashboard_folder_permissions.md Co-authored-by: Kyle Brandt <kyle@grafana.com>
53 lines
2.8 KiB
Markdown
53 lines
2.8 KiB
Markdown
+++
|
|
title = "Permissions"
|
|
description = "Permissions"
|
|
keywords = ["grafana", "configuration", "documentation", "admin", "users", "datasources", "permissions"]
|
|
type = "docs"
|
|
aliases = ["/docs/grafana/latest/permissions/overview/"]
|
|
[menu.docs]
|
|
name = "Permissions"
|
|
identifier = "permissions"
|
|
weight = 50
|
|
+++
|
|
|
|
# Permissions
|
|
|
|
What you can do in Grafana is defined by the _permissions_ associated with your user account.
|
|
|
|
There are three types of permissions:
|
|
- Permissions granted as a Grafana server admin
|
|
- Permissions associated with your role in an organization
|
|
- Permissions granted to a specific folder or dashboard
|
|
|
|
You can be granted permissions based on:
|
|
- Grafana server admin status
|
|
- Organization role (Admin, Editor, or Viewer)
|
|
- Folder or dashboard permissions assigned to your team (Admin, Editor, or Viewer)
|
|
- Folder or dashboard permissions assigned to your user account (Admin, Editor, or Viewer)
|
|
- (Grafana Enterprise) Data source permissions. For more information, refer to [Data source permissions]({{< relref "../enterprise/datasource_permissions.md" >}}) in [Grafana Enterprise]({{< relref "../enterprise" >}}).
|
|
|
|
## Grafana server admin
|
|
|
|
Grafana server admins have the **Grafana Admin** flag enabled on their account. They can access the **Server Admin** menu and perform the following tasks:
|
|
|
|
- Manage users and permissions.
|
|
- Create, edit, and delete organizations.
|
|
- View server-wide settings that are set in the [Configuration]({{< relref "../administration/configuration.md" >}}) file.
|
|
- View Grafana server stats, including total users and active sessions.
|
|
- Upgrade the server to Grafana Enterprise.
|
|
|
|
## Organization roles
|
|
|
|
Users can belong to one or more organizations. A user's organization membership is tied to a role that defines what the user is allowed to do in that organization. For more information, refer to [Organization roles]({{< relref "../permissions/organization_roles.md" >}}).
|
|
|
|
## Dashboard and folder permissions
|
|
|
|
Dashboard and folder permissions allow you to remove the default role based permissions for Editors and Viewers and assign permissions to specific users and teams. Learn more about [Dashboard and folder permissions]({{< relref "dashboard_folder_permissions.md" >}}).
|
|
|
|
## Data source permissions
|
|
|
|
Per default, a data source in an organization can be queried by any user in that organization. For example a user with `Viewer` role can still
|
|
issue any possible query to a data source, not just those queries that exist on dashboards he/she has access to.
|
|
|
|
Data source permissions allows you to change the default permissions for data sources and restrict query permissions to specific **Users** and **Teams**. For more information, refer to [Data source permissions]({{< relref "../enterprise/datasource_permissions.md" >}}) in [Grafana Enterprise]({{< relref "../enterprise" >}}).
|