Grafana access control, custom roles, service accounts, SAML, SSO settings, external team sync, quota, signing-key, health, and token-authenticated administrative operations. Generated from Grafana v13.1.0 official release-tagged Swagger 2 bytes, with the deployment-specific /api base supplied by a per-organization connection. Use a service-account bearer token; Grafana Cloud supports token authentication rather than Basic authentication. Every read is uncached, every mutation is grant-off and approval-gated, JSON response int64 literals are preserved as exact decimal strings, and raw file responses are captured as file_ref values. No Grafana object is misrepresented as a task, note, or project Source.
What this pack installs
- grafana-access Ingredient
Trust & control
What installing this whole pack would let it do. Recued grants these permissions at install — review them there before approving.
What it's allowed to do
Destructive
Web APIs
grafana-access
external change
Read: access_control.get_resource_permissions · No approvalAdmin: access_control.set_resource_permissions · Always asksAdmin: access_control.set_resource_permissions_for_built_in_role · Always asksAdmin: access_control.set_resource_permissions_for_team · Always asksAdmin: access_control.set_resource_permissions_for_user · Always asksRead: access_control.get_resource_description · No approvalRead: role.list · No approvalAdmin: access_control.create_role · Always asksDestructive: access_control.delete_role · Always asksRead: access_control.get_role · No approvalAdmin: access_control.update_role · Always asksRead: access_control.get_role_assignments · No approvalAdmin: access_control.set_role_assignments · Always asksRead: access_control.get_access_control_status · No approvalRead: access_control.list_team_roles · No approvalAdmin: access_control.add_team_role · Always asksAdmin: access_control.set_team_roles · Always asksDestructive: access_control.remove_team_role · Always asksRead: access_control.list_teams_roles · No approvalRead: access_control.list_user_roles · No approvalAdmin: access_control.add_user_role · Always asksAdmin: access_control.set_user_roles · Always asksDestructive: access_control.remove_user_role · Always asksRead: access_control.list_users_roles · No approvalRead: admin_ldap.get_sync_status · No approvalAdmin: admin_provisioning.admin_provisioning_reload_access_control · Always asksRead: health.get_health · No approvalRead: quota.get_current_org_quota · No approvalRead: quota.get_org_quota · No approvalRead: saml.get_metadata · No approvalDestructive: service_accounts.delete_service_account · Always asksRead: service_accounts.retrieve_service_account · No approvalAdmin: service_accounts.update_service_account · Always asksAdmin: service_accounts.create_token · Always asksRead: service_account.list · No approvalRead: signing_keys.retrieve_jwks · No approvalDestructive: sync_team_groups.remove_team_group_api_query · Always asksRead: sync_team_groups.get_team_groups_api · No approvalAdmin: sync_team_groups.add_team_group_api · Always asksRead: sync_team_groups.search_team_groups · No approvalRead: quota.get_user_quotas · No approvalRead: sso_settings.list_all_providers_settings · No approvalDestructive: sso_settings.remove_provider_settings · Always asksRead: sso_settings.get_provider_settings · No approvalAdmin: sso_settings.patch_provider_settings · Always asksAdmin: sso_settings.update_provider_settings · Always asks
Data it touches
SurfacesWeb APIs
Tags
pack:grafanagrafanaaccess-controlservice-accountsssoadministrationapicomposition