- Newest
- Most votes
- Most comments
I understand you're encountering an error while trying to create a workspace for an Amazon Managed Grafana dashboard. This error typically occurs due to insufficient permissions. To resolve this issue, you need to ensure that your IAM principal (user or role) has the necessary permissions attached.
To create a Grafana workspace, your IAM principal must have the "AWSGrafanaAccountAdministrator" policy attached. This policy provides the necessary permissions to create and manage workspaces for the entire organization within Amazon Grafana.
Additionally, since you've chosen IAM Identity Center (formerly AWS SSO) as the authentication option for your first workspace, you'll need two more policies attached to your IAM principal:
- "AWSSSOMemberAccountAdministrator"
- "AWSSSODirectoryAdministrator"
These policies provide the required permissions to manage AWS Organizations master and member accounts, as well as administrator access for SSO Directory.
If you don't have these policies attached, you'll need to work with your AWS account administrator to have them added to your IAM user or role. Once these permissions are in place, you should be able to create the Grafana workspace without encountering the error.
If you've verified that you have all the necessary permissions and are still experiencing issues, it would be advisable to double-check that Trusted access for AWS SSO is enabled from the Management Account in your AWS Organizations configuration. Also, ensure that Grafana is listed in the Applications within the AWS SSO console.
If the problem persists after implementing these steps, you may need to contact AWS Support for further assistance.
Sources
Create an Amazon Managed Grafana workspace - Amazon Managed Grafana
Error creating AWS managed Grafana workspace | AWS re:Post
Assign new user or group for creation of Grafana | AWS re:Post
answered 2 years ago
I recommend first verifying that IAM Identity Center is properly enabled in your AWS account and configured in the same region where you are creating the Grafana workspace. You will also want to check your IAM permissions to ensure you have the necessary access to create Grafana workspaces and manage IAM Identity Center operations. Sometimes, adding specific permissions like grafana:CreateWorkspace and related IAM Identity Center permissions to your IAM user or role can resolve this issue. If you're still encountering problems after checking these settings, it might be worth looking into any service quotas limitations or organization-level policies that could be affecting the workspace creation.
answered 2 years ago
Relevant content
asked 3 years ago
asked 3 years ago
