Ability to see Insights without Admin permissions
General
Escalation
General
Escalation
Description
How to test
FB: Percona-Lab/pmm-submodules#3840
Can be tested together with
How to document
Update documentation related to advisors to mention the ability of user with the editor to view (but not run) advisor checks and insights.
is blocked by
relates to
Smart Checklist
hideActivity
Show:

Catalina Adam March 6, 2025 at 9:43 AM
Documented with

vasyl.yurkovych March 3, 2025 at 12:16 PM
verified in FB perconalab/pmm-server-fb:PR-3840-c066f54

Michael Okoko September 10, 2023 at 8:28 PM
This also requires some FE work, since FE won't even make any advisor-related request for non-admin users. I've created a ticket for discussion and to help us track that here: https://jira.percona.com/browse/PMM-12487
Done
Details
Details
Assignee
Reporter

Priority
Components
Needs QA
Yes
Needs Doc
Yes
Planned Version/s
Fix versions
Story Points
6
Sprint
Smart Checklist Progress
4/4 - Done
Start date
Feb 11, 2025
Due date
Mar 10, 2025
Smart Checklist
Open Smart Checklist
Smart Checklist

Open Smart Checklist
Created July 25, 2023 at 11:43 AM
Updated last week
Resolved last week
Problem
Admin user is not available for MS customers (because Admin - our DBA), but see want customer users still see the value of advisors.
Proposed solution
Viewers cannot see Advisors (as there might be sensitive information).. so Editor looks like an excellent option to let us have some role without proper RBAC.
We can start using the EDITOR role from grafana in Advisors to let Editor: View Insights and Advisors but not let them run or disable them.
Acceptance Criteria
Users with viewer role
should not be able to view advisors at all
Users with editor role
should be able to view advisors related pages
should not able to run/disable/edit advisors
should not be able to run checks
Dev Notes
Can be implemented together with
Use new endpoint from to check if features are enabled or not