Skip to content

Commit

Permalink
Docs: Clarify when force_use_graph_api is required for Azure (grafana…
Browse files Browse the repository at this point in the history
  • Loading branch information
vtorosyan authored Dec 12, 2024
1 parent 2182f48 commit 63d3cf9
Showing 1 changed file with 2 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -380,6 +380,8 @@ Entra ID does not emit the groups claim in the token and emits a group overage c
If Grafana receives a token with a group overage claim instead of a groups claim,
Grafana attempts to retrieve the user's group membership by calling the included endpoint.

To ensure this functionality works correctly, you must enable [`force_use_graph_api`]({{< relref "./#force-fetching-groups-from-microsoft-graph-api" >}}) in your configuration.

{{% admonition type="note" %}}
The 'App registration' must include the `GroupMember.Read.All` API permission for group overage claim calls to succeed.

Expand Down

0 comments on commit 63d3cf9

Please sign in to comment.