Skip to content

Not Able to create a workspace for a grafana board

0

Dear supporters,

I am trying to to create a workspace for creating a grafana dash board for learning purposes. I have chosen all the options that i want and I IAM identity center as an authentication option but at the last step I am getting this error: Your account is not allowed to perform the requested action. Please reach out to AWS support. That's why I thought of contacting the support. Is there a way you can lead me to fix this ?

Thank you very much and best regards. Houssam

2 Answers
0

I understand you're encountering an error while trying to create a workspace for an Amazon Managed Grafana dashboard. This error typically occurs due to insufficient permissions. To resolve this issue, you need to ensure that your IAM principal (user or role) has the necessary permissions attached.

To create a Grafana workspace, your IAM principal must have the "AWSGrafanaAccountAdministrator" policy attached. This policy provides the necessary permissions to create and manage workspaces for the entire organization within Amazon Grafana.

Additionally, since you've chosen IAM Identity Center (formerly AWS SSO) as the authentication option for your first workspace, you'll need two more policies attached to your IAM principal:

  1. "AWSSSOMemberAccountAdministrator"
  2. "AWSSSODirectoryAdministrator"

These policies provide the required permissions to manage AWS Organizations master and member accounts, as well as administrator access for SSO Directory.

If you don't have these policies attached, you'll need to work with your AWS account administrator to have them added to your IAM user or role. Once these permissions are in place, you should be able to create the Grafana workspace without encountering the error.

If you've verified that you have all the necessary permissions and are still experiencing issues, it would be advisable to double-check that Trusted access for AWS SSO is enabled from the Management Account in your AWS Organizations configuration. Also, ensure that Grafana is listed in the Applications within the AWS SSO console.

If the problem persists after implementing these steps, you may need to contact AWS Support for further assistance.
Sources
Create an Amazon Managed Grafana workspace - Amazon Managed Grafana
Error creating AWS managed Grafana workspace | AWS re:Post
Assign new user or group for creation of Grafana | AWS re:Post

answered 2 years ago

0

I recommend first verifying that IAM Identity Center is properly enabled in your AWS account and configured in the same region where you are creating the Grafana workspace. You will also want to check your IAM permissions to ensure you have the necessary access to create Grafana workspaces and manage IAM Identity Center operations. Sometimes, adding specific permissions like grafana:CreateWorkspace and related IAM Identity Center permissions to your IAM user or role can resolve this issue. If you're still encountering problems after checking these settings, it might be worth looking into any service quotas limitations or organization-level policies that could be affecting the workspace creation.

AWS

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.