website/integrations: Add custom Group/Role mapping documentation for Grafana#7453
website/integrations: Add custom Group/Role mapping documentation for Grafana#7453BeryJu merged 4 commits intogoauthentik:mainfrom
Conversation
✅ Deploy Preview for authentik-storybook ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
✅ Deploy Preview for authentik ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
|
Thanks so much @gmemstr for the addition to the Grafana integration docs! We will get a tech review done and merge your PR as soon as possible. We appreciate you! |
Co-authored-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Gabriel Simmer <github@gmem.ca>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #7453 +/- ##
==========================================
- Coverage 92.59% 90.98% -1.61%
==========================================
Files 587 587
Lines 28898 28989 +91
==========================================
- Hits 26757 26376 -381
- Misses 2141 2613 +472
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
BeryJu
left a comment
There was a problem hiding this comment.
Hi! The default profile mapping already returns the groups which is what the current configuration use, so this shouldn't be required. Did the default configuration not work for you?
|
@BeryJu As noted in the PR, it does not - the |
Hi, I can confirm that groups are propagated to grafana, but are not used to map user to role for some reason. |
* main: (30 commits) outposts/proxy: better Redis error message (#8044) translate: Updates for file web/xliff/en.xlf in fr (#8046) web: bump the eslint group in /tests/wdio with 2 updates (#8041) web: bump the storybook group in /web with 7 updates (#8042) web: bump the eslint group in /web with 2 updates (#8043) web: bump @types/guacamole-common-js from 1.3.2 to 1.5.2 in /web (#8030) translate: Updates for file web/xliff/en.xlf in zh_CN (#8038) translate: Updates for file web/xliff/en.xlf in zh-Hans (#8039) website: bump clsx from 2.0.0 to 2.1.0 in /website (#8033) core: bump golang from 1.21.3-bookworm to 1.21.5-bookworm (#8027) web: bump the babel group in /web with 4 updates (#8028) web: bump the esbuild group in /web with 2 updates (#8029) web: bump rollup from 4.9.1 to 4.9.2 in /web (#8031) tests/e2e: fix tests to work without docker network_mode host (#8035) website/docs: fix typo (#8015) web: bump API Client version (#8025) enterprise/providers: Add RAC [AUTH-15] (#7291) outposts: disable deployment and secret reconciler for embedded outpost in code instead of in config (#8021) providers/proxy: use access token (#8022) website/integrations: Add custom Group/Role mapping documentation for Grafana (#7453) ...

Details
Adds some more documentation around assigning roles in Grafana from Authentik groups. Grafana will use the profile scope's groups entry to map to its own Groups concept (from what I can tell), so we need to nest the groups somewhere Grafana won't automatically pick up so they can be assigned.
Checklist
ak test authentik/)make lint-fix)If an API change has been made
make gen-build)If changes to the frontend have been made
make web)make i18n-extract)If applicable
make website)