Using permissions

What you can do in a Grafana workspace in Amazon Managed Grafana is defined by the permissions that are associated with your user.

Amazon Managed Grafana uses three types of permissions:

• Permissions granted as a Grafana admin

• Permissions associated with your membership on a team

• Permissions granted to a specific folder or dashboard

You can be granted permissions based on your admin status, dashboard or folder permissions assigned to your user, and data source permissions.

Dashboard and folder permissions overview

By using dashboard and folder permissions, you can remove the default role-based permissions for editors and viewers. You can then assign permissions to specific users and teams. For more information, see Dashboard and folder permissions.

Data source permissions overview

By default, a data sourcecan be queried by any user. For example, a user with the Viewer role can issue any possible query to a data source, not just those queries that exist on dashboards they have access to.

Using data source permissions, you can change the default permissions for data sources and restrict query permissions to specific Users and Teams. For more information, see Data source permissions.