By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Can't seem to login as ADMIN on Amazon Managed Grafana

0

Hi,

I've started an Amazon Grafana workspace where I am using SAML for authentication. I am able to login to the grafana workspace using my IdP but I am not able to login with admin privileges. I don't mind others from my org logging in as admin, so I've set the Assertion attribute role to the mail attribute and the Admin role values to * i.e. allow all users to be admin. I've also explicitly tried setting the Admin role values to my email, even then I was not able to log in as an admin and am logging in as a Viewer.

The weird part is I was able to view the admin dashboard in one of the logins but once I logged myself out and logged back in, I started seeing the viewer dashboard again.

Note that the "I want to opt-out of assigning admins to my workspace." button is not selected in my configuration. Any help on the matter will be greatly appreciated. Thank you!

Topics
Security, Identity, & ComplianceManagement & Governance
Tags
Security, Identity, & ComplianceAWS Identity and Access ManagementAmazon Grafana
Language
English
rePost-User-3357235
asked a year ago301 views
1 Answer
0

Hello,

To log in as an Admin you will need to ensure that your IdP role is mapped to the Grafana Admin role in the Amazon Managed Grafana workspace. For more information on this please see the link: https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG-SAML.html#authentication-in-AMG-SAML-providers

Since I am unsure of the IdP you are using, there is a tutorial that you can follow that helps you connect your IdP to Grafana and set up the Admin role. https://aws.amazon.com/blogs/mt/amazon-managed-grafana-supports-direct-saml-integration-with-identity-providers/

Uraisha M
answered a year ago
  • rePost-User-3357235
    a year ago

    Hi, I did look through both these logs before starting this thread. Somehow things are started working for me and I am able to log in as an admin now. Could you let me know if the "Admin role values" input allows for regex like passing "*" would allow everybody in my org to log in as an admin?

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content