Azure Monitor: Current User authentication

You can now configure the Azure Monitor data source to authenticate as the logged-in Grafana user when making query and resource requests if you also use Azure Entra to sign your users into Grafana.

Current User authentication allows you to enforce Azure RBAC restrictions on your Grafana users by removing the need to provide broad service credentials. Once a data source is configured with Current User authentication a user will only have access to resources they can access directly in Azure.

Additionally, data sources configured to use Current User authentication are less likely to be impacted by throttling issues due to the individual level of access.

Current User authentication does not inherently support backend features such as alerting. To account for this, data sources configured with Current User authentication can optionally specify service credentials that will be utilized for backend features when no signed-in user is available.

To get started with Current User authentication, refer to the Azure Monitor data source documentation.