VolkovLabs / business-satellite

The Business Satellite data source for Grafana allows retrieving data from local and remote Grafana instances via HTTP API.
https://docs.volkovlabs.io
Apache License 2.0
12 stars 2 forks source link

Permission denied alert.provisioning:read #34

Closed YoonSungHyun-Git closed 1 year ago

YoonSungHyun-Git commented 1 year ago

Hello,

I watched the YouTube video well.

An error occurred while proceeding according to the installation guide, so please inquire.

image

I'm using grafana 9.4.7 version

and installed the app through Grafana plugins.

grafana log ::

logger=context userId=3 orgId=1 uname=sa-anotations t=2023-04-17T14:07:00.12210861+09:00 level=info msg="Access denied" userID=3 accessErrorID=ACE3144968927 permissions="action:alert.provisioning:read scopes:" logger=context userId=3 orgId=1 uname=sa-anotations t=2023-04-17T14:07:00.122516508+09:00 level=info msg="Request Completed" method=GET path=/api/v1/provisioning/alert-rules status=403 remote_addr=[hide] time_ms=90 duration=90.233508ms size=173 referer= handler=/api/v1/provisioning/alert-rules

grafana ini

[unified_alerting] enabled = true

mikhail-vl commented 1 year ago

@YoonSungHyun-inzent Are you using Viewer permissions? You need Editor or Admin permissions to access provisioning.

Let me know if there is anything else.

mikhail-vl commented 1 year ago

We explained it in the documentation and Daria mentioned it in the latest step-by-step tutorial: https://volkovlabs.io/plugins/volkovlabs-grapi-datasource/configuration/.

YoonSungHyun-Git commented 1 year ago

@mikhail-vl permissions? Are you asking for the permissions of the dashboard?

image

I'm going on with an admin account.

In the service account settings shown in the guide above, the privileges are set as follows. Is there anything else?

image

mikhail-vl commented 1 year ago

@YoonSungHyun-inzent I was referencing the Token or API Key used for the Grafana HTTP API Data Source.

The data source works with the provided credentials and not your user: https://volkovlabs.io/plugins/volkovlabs-grapi-datasource/configuration/. Let me know if it's clear.

YoonSungHyun-Git commented 1 year ago

@mikhail-vl

You were talking about that authority.

image

image

I added the token to the editor permission as shown above and added it to the datasource.

YoonSungHyun-Git commented 1 year ago

@mikhail-vl

Can the remote Grafana URL from DataSource cause the above permission error? Registering with localhost:3000 causes a bad gateway.

mikhail-vl commented 1 year ago

@YoonSungHyun-inzent The data source is still very new. I need to experiment with different security levels.

If you set the role as Admin to your Service Account, then it should work. It's probably related to your dashboard or configuration, which is Admin only.

mikhail-vl commented 1 year ago

@YoonSungHyun-inzent The issue is resolved in https://github.com/VolkovLabs/volkovlabs-grapi-datasource/pull/39.

Alert Rules required Admin permissions to return Alert Names and UIDs.

We added an Exception Handling to prevent this issue for Viewers and older versions of Grafana, before 9.4.0. You can test using the latest CI artifact before the official release: https://github.com/VolkovLabs/volkovlabs-grapi-datasource/actions/workflows/ci.yml