Role Editor for community.grafana.grafana_datasource Module

[ishk0]

Hello,
I am using:

• grafana_version: 11.1.3
• grafana_package_arch: amd64

My community.grafana.grafana_datasource module configuration:

---
- name: Process datasources
  community.grafana.grafana_datasource: {}
  args: '{{ grafana_manager_credentials | combine(item) }}'
  loop: '{{ grafana_manager_datasources }}'
  loop_control:
    label: '{{ item.name }}'
  tags:
    - grafana-datasources
    - grafana_datasources

  - name: Alpha
    ds_type: postgres
    ds_url: '{{ acc.addr }}:5432'
    database: '{{ acc.alpha.db }}'
    user: '{{ accs.anal.user }}'
    password: '{{ acc.anal.ps }}'
    enforce_secure_data: true

I noticed that a Grafana user with the Editor role cannot perform a SELECT operation on this Alpha datasource. However, if I manually create an identical Alpha-man datasource, the Editor role has SELECT access.

If I grant the admin role to the user, SELECT works for both datasources.

Could you please help me understand how to configure the role correctly? Thank you!

[Nemental]

Hi @ishk0, thanks for starting the discussion. My first guess is that the datasource created with Ansible is different from the one created manually. Have you made sure they are the same? The best thing to do is to use an API request to output the datasources and compare them.

[ishk0]

Editor:

Admin:

Here's a demonstration of the problem. I don't see any difference between these datasources, even though one of them was created by an Ansible playbook and the other one manually.

[ishk0]

Update on the situation: I noticed that if I change the Host URL of the Ansible-created datasource to an incorrect value and then revert it back to the correct one, the Editor also gains access to "SELECT".

[Nemental]

Thanks for the further information on the problem. I would be interested in comparing the two data sources using the JSON through the Grafana-API, not through the web interface.