Restrict Editor Role to view chart but not custom chart queries


#1

Good afternoon,

It would be possible to extend the behavior of the Editor role so in a Chart panel this user could not edit Metrics or this tab is hidden? I want allow the user to only be able to visualize the information but not be allowed to make custom queries that allow access to other information not related to their role.

Thanks in advanced.
Francisco


#2

For this you TSDB needs to support data isolation and you need to setup a separate org with a datasource that can only access the specific data you want to isolate.

Any editor or viewer role can issue and possible query to any datasource in that org. So you need to use different Grafana orgs and have datasources that support data isolation.


#3

Many thanks Torkel, we will try it and comment here the results.