[Duplicated] Feature idea - help customers get read access to their relevant grafana dashboards

[consideRatio]

@scottyhq asked in a support ticket about providing access to a grafana:

Is it easy to give hub admins access to grafana https://grafana.uwhackweeks.2i2c.cloud/login ?

Thinking about this in the most general case where we can have different ways for users to authenticate themselves, I see some options.

For customers with dedicated clusters:

1. We configure one additional user besides the admin user and the user created to update the grafana dashboards, and let that user have just read access to the instance. Then, we share those credentials with the community representatives to handle as they please.
2. We let Grafana work against the production JupyterHub as an identity provider

For customers with shared clusters:
0. First of all, I'm really not sure here because we have a shared grafana instance accessing several different data sources and providing a bit more dashboards etc.

1. I think maybe its reasonable to configure one additional user per hub, and a set of permissions for that user to have readonly access to the relevant prometheus data source.
2. I don't think its reasonable to setup auth against all of the jupyterhub's and even if we do, the permissions granted should depend on what hub you authed against etc.

Investigative work needed

1. Can we via REST API and/or configuration add a user to Grafana? I think yes, because I think @GeorgianaElena has done that already.
2. Can we via REST API and/or configuration make a user be granted permissions to a specific data source, so that a dropdown list will only include the datasources that the user has permissions to? Below is an example of a dropdownlist.
   

[sgibson91]

I think there are a few related, possibly duplicate?, issues:

• Decide on a path for enabling GitHub auth to grafana for Community Reps of hubs on dedicated clusters #1850
• Enable GitHub authentication to our Grafana dashboards for all *dedicated* clusters #1827
• Allow access to uwhackweeks grafana outside of 2i2c #1570

[damianavila]

Yes, I think this conversation is already captured in other issues, so let's close this one. Feel free to reopen if you disagree.