Grafana Logs with Loki configure RBAC for tenant

Grafana Loki
1

Hi We have provisioned Loki with Grafana as containers like below

grafana:
image: grafana/grafana:13.2.2
ports:

  • “127.0.0.1:3000:3000”
    depends_on: [tempo, mimir, loki]
    networks: [lgtm]

Loki — internal port 3100 only (expose, not published to the internet):

loki:
  image: grafana/loki:3.1.0
  command: ["-config.file=/etc/loki/loki.yaml"]
  volumes:
    - ./config/loki.yaml:/etc/loki/loki.yaml:ro
    - loki_data:/loki
  expose: ["3100"]

grafana:
image: grafana/grafana:13.2.2
ports:

  • “127.0.0.1:3000:3000”
    depends_on: [tempo, mimir, loki]
    networks: [lgtm]

I understand from the Grafana documentation that (Grafana Role-based access control (RBAC) | Grafana documentation)
Also Loki documentation - (Manage tenant isolation | Grafana Loki documentation)
we can configure RBAC. However our requirement is that in the Loki have multi tenancy enabled and have tenant based access to logs. like tenant A can access only corresponding logs. likewise for other tenants.

2

You’re going to want to upgrade to Loki 4.0 when it is released. It’s going to contain label based access control, which requires multi-tenant mode. Here’s a preview of the documentation.

3

Hi @juliestickler

Thanks for your reply.

Is it possible to create separate organisations in Grafana and then define org specific datasources, while creating datasource we specify the tenantid(header definition in the datasource)?