Miss invite button in /org/users page use organization admin user

Grafana Installation
#1

  • What Grafana version and what operating system are you using?
    grafana v9.0.0
    os：Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)

  • What are you trying to achieve?

  • How are you trying to achieve it?

  • What happened?
    Miss invite button in /org/users page use organization admin user after upgrade grafana from v8.4.4 to v9.0.0

  • What did you expect to happen?
    organization admin user should have user invite permission

  • Can you copy/paste the configuration(s) that you are having problems with?
    [rbac]
    enabled = true
    permission_cache = true

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.
    manual get /org/users/invite，that log print
    level=info msg=“Access denied” userID=133 accessErrorID=ACE1815728141 permissions=“action:users:create scopes:”

  • Did you follow any online instructions? If so, what is the URL?

3 Likes
#2

+1
yes, same issue for me on 9.0.0. When I log in (Admin role), I can’t invite users. Tested with 9.0.2, and the issue is still there.

If I log in as Admin (in the test container for 9.0.2), then i’m able to see the “Invite” button. Note that for production usage, we don’t create the admin user. (using LDAP auth)

Also tried via API:

curl -H Content-type:application/json  -u admin_user@company.com:password localhost:3000/api/admin/users -d '{"name":"john","email":"john@company.com","password":"letmein","OrgId":1}'
{
  "accessErrorId": "ACE7038818362",
  "message": "You'll need additional permissions to perform this action. Permissions needed: users:create",
  "title": "Access denied"
}

logs from Grafana:

grafana       | logger=context traceID=00000000000000000000000000000000 userId=2 orgId=1 uname=admin_user@company.com t=2022-07-13T16:16:16.0471002Z level=info msg="Access denied" userID=2 accessErrorID=ACE7038818362 permissions="action:users:create scopes:"
grafana       | logger=context traceID=00000000000000000000000000000000 userId=2 orgId=1 uname=admin_user@company.com t=2022-07-13T16:16:16.047187357Z level=info msg="Request Completed" method=POST path=/api/admin/users status=403 remote_addr=172.19.0.1 time_ms=17 duration=17.249276ms size=175 referer= traceID=00000000000000000000000000000000
#3

Hi There.
Same here (Not seeing Invite button when logged as a Org Admin). Grafana 9.0.3

#4

+1, 9.0.3 has same issue

#5

Hi! I hope you’ve already found the fix. For anyone else looking, this issue is resolved in 9.0.5