Data source permissions

Data source permissions allow you to restrict access for users to query a data source. For each data source there is a permission page that allows you to enable permissions and restrict query permissions to specific Users and Teams.

Note: Available in Grafana Enterprise and Grafana Cloud Pro and Advanced.

Enable data source permissions

Data source permissions - 图1Data source permissions - 图2

By default, data sources in an organization can be queried by any user in that organization. For example, a user with the Viewer role can issue any possible query to a data source, not just queries that exist on dashboards they have access to.

When permissions are enabled for a data source in an organization, the user who created the datasource can edit the datasource and in addition, viewers can query the datasource.

Enable permissions for a data source:

  1. Navigate to Configuration > Data Sources.
  2. Select the data source you want to enable permissions for.
  3. On the Permissions tab, click Enable.

Caution: Enabling permissions for the default data source makes users not listed in the permissions unable to invoke queries. Panels using default data source will return Access denied to data source error for those users.

Allow users and teams to query a data source

Data source permissions - 图3Data source permissions - 图4

After you have enabled permissions for a data source you can assign query permissions to users and teams which will allow access to query the data source.

Assign query permission to users and teams:

  1. Navigate to Configuration > Data Sources.
  2. Select the data source you want to assign query permissions for.
  3. On the Permissions tab, click Add Permission.
  4. Select Team or User.
  5. Select the entity you want to allow query access and then click Save.

Disable data source permissions

Data source permissions - 图5Data source permissions - 图6

If you have enabled permissions for a data source and want to return data source permissions to the default, then you can disable permissions with a click of a button.

Note that all existing permissions created for the data source will be deleted.

Disable permissions for a data source:

  1. Navigate to Configuration > Data Sources.
  2. Select the data source you want to disable permissions for.
  3. On the Permissions tab, click Disable Permissions.