Skip to content

Editor API Key Cannot Modify Alert Rule Group Created by Admin (403 Forbidden) #2174

Open
@szymonsobieszczanskiec

Description

@szymonsobieszczanskiec

Terraform Version

1.11.3

Terraform Grafana Provider Version

3.25.0

Grafana Version

No response

Affected Resource(s)

No response

Terraform Configuration Files

No response

Expected Behavior

An API key with Editor permissions should be able to read, update, or destroy alert rule groups in folders it has access to, regardless of which user or key originally created the rule group.

Actual Behavior

When using an Editor API key to read a grafana_rule_group resource created by an Admin API key, Terraform fails with a 403 Forbidden error.

Creating alert rule groups works fine with the Editor key.

The Admin key can read and modify all rule groups without issue.

Steps to Reproduce

Authenticate with a Grafana API key that has Admin permissions.

Use Terraform to create a grafana_rule_group resource in a folder accessible by Editor users.

Switch to using an Editor API key.

Run terraform plan or terraform apply.

Observe the error:
Error: 403 Forbidden - error reading rule group

Important Factoids

No response

References

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions