User accounts created via Google OAuth -> kube-prometheus-stack imported dashboards rights

Grafana Authentication
1

  • What Grafana version and what operating system are you using?
    K8s v1.26.10+rke2r2, Grafana v10.2.2

  • What are you trying to achieve?
    All users are able to see all dashboards imported from kube-prometheus-stack install.

  • How are you trying to achieve it?
    All new users are imported and created from Google OAuth on login. They have editor role, which is set in grafana.ini configMap. However, I can’t change (or rather I don’t know how) view rights for the mentioned dashboards.

  • What happened?
    Users are not able to see all dashboards upon login.

  • What did you expect to happen?
    Users are able to see all dashboards upon login.

  • Can you copy/paste the configuration(s) that you are having problems with?

[auth]
oauth_allow_insecure_email_lookup = true
[auth.google]
allow_sign_up = true
auto_login = false                                                                                                                                                          
auth_url = https://accounts.google.com/o/oauth2/auth                                                                                                                      
client_id = xxx                                                                                 
client_secret = xxx
enabled = true                                                                                                                                                            
scopes = openid email profile                                                                                                                                             
token_url = https://accounts.google.com/o/oauth2/token                                                                                                                    
skip_org_role_sync = false                                                                                                                                                
[users]                                                                                                                                                                   
auto_assign_org_role = Editor

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.
    When I try to switch imported dashboards into new folder, which would be visible to all users:
    image

  • Did you follow any online instructions? If so, what is the URL?

2

Fixed by editing configMap grafana-config-dashboards and setting allowUiUpdated to true, then moving dashboards to folder with correct permissions