Ctrlk
Sign up for FreeKnowledge Base
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Grafana Cloud

Connect P0 to Grafana Cloud to grant just-in-time access to Grafana Cloud teams.

Grafana Cloud is a preview integration. The setup takes about 5 minutes.

The Grafana Cloud integration lets P0 grant just-in-time, time-limited access to your Grafana Cloud teams. P0 connects to your Grafana Cloud stack through its SCIM API and manages team membership as access is requested, approved, and revoked.

How it works

P0 manages access at the team level within a Grafana Cloud organization:

  1. A user requests access to a Grafana Cloud team through P0.

  2. After approval, P0 provisions the user in your Grafana Cloud stack through the SCIM API (if the user does not already exist) and adds them to the requested team.

  3. When the access duration expires or an approver revokes access, P0 removes the user from the team. The user's Grafana Cloud account remains in place.

P0 uses the user's email address as the canonical identity when provisioning the account.

Before you begin

To set up the Grafana Cloud integration, you need:

  • A Grafana Cloud account with administrator access.

  • The SCIM provisioning feature enabled for your Grafana Cloud stack.

  • A Grafana service account with the User administration:Write and Teams:Write roles, and a service-account token for it.

  • Your Grafana Cloud stack ID, shown on the SCIM authentication plugin configuration page in Grafana Cloud.

  • A P0 account with administrator access.

Setting up Grafana Cloud

P0 stores the SCIM service-account token as an encrypted secret and uses it to call the Grafana Cloud SCIM API for your stack.

  1. Log in to p0.app and navigate to the Integrations page.

  2. Under Resources, select Grafana Cloud.

  3. Select the Team management component.

  4. Enter the Organization identifier for your Grafana Cloud organization. This is the <organization> part of your Grafana Cloud URL (<organization>.grafana.net). Click Next.

  5. Enter the following values:

    Field
    Value

    SCIM service-account token

    The token for a Grafana service account with the User administration:Write and Teams:Write roles.

    Grafana stack ID

    The Stack ID shown on your Grafana Cloud SCIM authentication plugin configuration page.

  6. Click Finish.

P0 can now manage just-in-time access to your Grafana Cloud teams. See Requesting access to make your first request.

Additional resources

PreviousCloud Run invocationNextRequesting access

Last updated