Creating Accounts With LDAP

[max1c]

Terraform Version

• Terraform: 1.4.6
• Terraform Grafana Provider: 1.39
• Grafana: 9.3

Expected Behavior

This is more of a general question for clarification rather than a bug report. We have a Grafana instance (hosted on prem) that plugs into LDAP. We have created teams using 'grafana_team' and want to add all of the users to appropriate teams. Since the users can only be added to the teams once the accounts are created in Grafana we want to create all users from our list (around 200). However, the 'grafana_users' only allows to use basic auth when creating the accounts. I have also checked Ansible module and it looks like it also only supports basic auth. Is there a way to create accounts in Grafana which would then be connected and logged-in via LDAP? If not, is there a workaround for this?

[max1c]

I found this as a reference: #725
Now I am trying to do the following: query LDAP for the list of users and query the Grafana for the list of users. Then use setintersection() to match two lists. Here is the code I am using:

resource "grafana_team" "teams" {
  for_each = local.test.teams
  members  = setintersection(toset(data.ldap_group.group[each.key].members_names), [for user in data.grafana_users.all_users.users : user.login])
}

The terraform plan passes as expected. It correctly outputs the usernames that exist in Grafana interface. However, terraform apply fails with "Error: error adding user username. User does not exist in Grafana". This seems to be an issue for all users even though they clearly exist in the interface. I've also tried by creating users locally (no LDAP) and the same error occurs. @julienduchesne Can you please help with this?

[max1c]

Okay, it looks like it has to be an email and cannot be a user.name.