Grafana not effected by change of role from Viewer to Admin

If you've changed a user's role from Viewer to Admin in AWS IAM Identity Center but don't see any change in their Grafana access, there are a few things to consider:

1. Permissions hierarchy: In Amazon Managed Grafana, the highest permission always wins. If there are more specific permissions set at the dashboard or folder level, these may be overriding the general role change.

2. Sync delay: There might be a delay in syncing the permission changes from IAM Identity Center to the Grafana workspace. You may need to wait a short while for the changes to take effect.

3. Workspace-specific settings: Ensure that the user's role has been updated specifically for the Grafana workspace in question. The general IAM Identity Center role change may not automatically propagate to all connected services.

4. Session persistence: The user may need to log out and log back in to the Grafana workspace for the new permissions to take effect.

5. Conflicting permissions: Check if there are any conflicting permissions set at different levels (workspace, folder, or dashboard) that might be preventing the new Admin role from taking full effect.

If you've verified all these points and still don't see any change, you may need to review the specific permissions set for the user within the Grafana workspace itself. Remember that Admin users should have full access to create, edit, and delete dashboards, manage data sources, and perform other administrative tasks.

If the issue persists, you might need to contact AWS support for further assistance, as there could be an underlying issue with the integration between IAM Identity Center and your Amazon Managed Grafana workspace.
Sources
Dashboard and folder permissions - Amazon Managed Grafana
User roles - Amazon Managed Grafana