This is documentation for the next version of Grafana. For the latest stable release, go to the latest version.
Data Source LBAC rules API
The Data Source LBAC rules are only available in Grafana Cloud. Only cloud loki data sources are supported.
LBAC (Label-Based Access Control) rules can be set for teams.
Get LBAC rules for a data source
GET /api/datasources/:uid/lbac/teams
Gets all existing LBAC rules for the data source with the given uid
.
Required permissions
Action | Scope |
---|---|
datasources:read | datasources: datasources:uid: datasources:uid:my_datasource (single data source) |
Examples
Example request:
GET /api/datasources/:uid/lbac/teams HTTP/1.1
Accept: application/json
Content-Type: application/json
Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
Example response:
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
Content-Length: 131
{
"rules": [
{
"teamId": "1",
"rules": [
"{ service_name=\"bigquery-sync-mysql\" }"
]
},
{
"teamId": "2",
"rules": [
"{ service_name=\"api\" }"
]
}
]
}
Update LBAC rules for a data source
PUT /api/datasources/:uid/lbac/teams
Updates LBAC rules for teams associated with the data source with the given uid
. Here you submit a list of teams and the rules for each team.
Deleting a team from the list will remove the team’s LBAC rules. You have to submit all teams and their rules to be updated, to remove a team’s rules, you have to submit the current list of rules without the team.
Required permissions
Action | Scope |
---|---|
datasources:write | datasources: datasources:uid: datasources:uid:my_datasource (single data source) |
datasources.permissions:write | datasources: datasources:uid: datasources:uid:my_datasource (single data source) |
Examples
Example request:
PUT /api/datasources/my_datasource/lbac/teams
Accept: application/json
Content-Type: application/json
Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
{
"rules": [
{
"teamId": "1",
"rules": [
"{ service_name=\"bigquery-sync-mysql\" }"
]
},
{
"teamId": "2",
"rules": [
"{ service_name=\"api\" }"
]
}
]
}
Example response:
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
Content-Length: 35
{
"id": 1,
"message": "Data source LBAC rules updated",
"name": "loki",
"rules": [
{
"teamId": "1",
"rules": [
"{ service_name=\"bigquery-sync-mysql\" }"
]
},
{
"teamId": "2",
"rules": [
"{ service_name=\"api\" }"
]
}
],
"uid": "ee1nm1t7spog0e",
}