Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Ability to see Insights without Admin permissions

Description

Problem

Admin user is not available for MS customers (because Admin - our DBA), but see want customer users still see the value of advisors.

Proposed solution

Viewers cannot see Advisors (as there might be sensitive information).. so Editor looks like an excellent option to let us have some role without proper RBAC.
We can start using the EDITOR role from grafana in Advisors to let Editor: View Insights and Advisors but not let them run or disable them.

Acceptance Criteria

  • Users with viewer role

    • should not be able to view advisors at all

  • Users with editor role

    • should be able to view advisors related pages

    • should not able to run/disable/edit advisors

    • should not be able to run checks

Dev Notes

  • Can be implemented together with

  • Use new endpoint from to check if features are enabled or not

How to test

FB: Percona-Lab/pmm-submodules#3840

Can be tested together with

How to document

Update documentation related to advisors to mention the ability of user with the editor to view (but not run) advisor checks and insights.

Smart Checklist

hide

Activity

Show:

Catalina Adam March 6, 2025 at 9:43 AM

Documented with

vasyl.yurkovych March 3, 2025 at 12:16 PM

verified in FB perconalab/pmm-server-fb:PR-3840-c066f54

Michael Okoko September 10, 2023 at 8:28 PM

This also requires some FE work, since FE won't even make any advisor-related request for non-admin users. I've created a ticket for discussion and to help us track that here: https://jira.percona.com/browse/PMM-12487

Done

Details

Assignee

Reporter

Priority

Components

Labels

Needs QA

Needs Doc

Planned Version/s

Fix versions

Story Points

Sprint

Smart Checklist Progress

Start date

Due date

Parent

Smart Checklist

Created July 25, 2023 at 11:43 AM
Updated March 31, 2025 at 12:08 PM
Resolved March 10, 2025 at 11:20 AM