Card #3439 · Grafana
Granular dashboard and folder permission management issues
Users are struggling with precise access control for dashboards and folders, including issues with provisioning permissions and preventing unauthorized access via URL manipulation. There are also reports of admin permissions not reflecting in the UI or being lost for LDAP users.
Pain score
0.24/ 1.00 · weighted product of four components
Reach1.00distinct authors (log-normalized)
Recency1.00freshness decay, half-life months
Engagement0.84upvotes + comments, normalized
Monetization0.50willingness-to-pay cues in evidence
§ Evidence — 5 verified quotes
I can select an agentID by grafana Login but when they change any variable they can change the user ID in the URL. So one agent has access to another agents statistics.
after creating a dashboard in a given folder, create a user and let them only see that folder (using config files).
We also have issue with Admin permission for LDAP users. The Admin permission takes off due some time.
I have updated the user to be admin user but admin permissions are not reflected in the UI.
A user with Viewer permission, and Grafana with view_can_edit enabled: 1 - has the ability to create folders 2- can also access and change the ‘Alerts’ section from the main menu.
Comments are a Pro feature — join the conversation, share what you've shipped, hear what others are building.
Upgrade to Pro