Is it possible to use the SSO Settings API on OSS?

Grafana Developers & API
, ,
1

I have a question about the SSO Settings API on OSS.

The SSO Settings API is described in the documentation as being usable in OSS, but we believe it is not usable in OSS based on the following observations. Is my understanding correct? If my understanding is wrong, or if there is any way to use SSO Settings API on OSS, please let me know.

The SSO Settings API requires settings:read or settings:write permission, but it is not granted to the default Admin user.
RBAC needs to be configured to grant the privileges, but the RBAC API is not available in the OSS version.

  • What Grafana version and what operating system are you using?

    • grafana/grafana-oss:11.2.2-security-01

  • What and How are you trying to achieve?

    1. Create an Admin user on grafana.ini.
    2. Create a service account and token with Service account API.
    3. Get SSO settings with SSO Settings API.

  • What happened?

    • The following 403 error occurred
{
  "accessErrorId": "ACE9908005332",
  "message": "You'll need additional permissions to perform this action. Permissions needed: settings:read",
  "title": "Access denied"
}
  • What did you expect to happen?
    Can get and create SSO settings.

Thank you.

1 Like