Skip to content

Integrating SailPoint with Grafana

Grafana is an open-source, multi-platform analytics and interactive visualization web application developed by Grafana Labs. It provides dashboards, charts, graphs, and alerts when connected to supported data sources, and is widely used for observability and monitoring across enterprises. This document provides instructions to configure a new direct connection to a Grafana source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Grafana connector supports the following:

Account Management

  • Aggregate Users
  • Entitlement Management (via Account Attributes)

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  1. Log in to your Grafana instance (Grafana Cloud at https://<your-stack>.grafana.net or your self-hosted Grafana URL) as an Organization Admin.
  2. Go to Administration > Users and access > Service accounts.
  3. Select Add service account, give it a name (for example, sailpoint-quick-compliance), and assign it the Admin role (or a custom role with users:read and org.users:read).
  4. Open the newly created service account and click Add service account token.
  5. Provide a token name and (optional) an expiration date, then click Generate token.
  6. Copy the generated token immediately, Grafana will not show it again. This is your API Token.
  7. Identify the Base URL of your Grafana instance’s API (for example, https://<your-stack>.grafana.net/api).

For more information about the Grafana HTTP API, refer to the Grafana HTTP API documentation.

Required Permissions

The following RBAC actions are required on the Grafana service account token (or assign the Admin organization role, which includes them):

  • users:read (scope users:*)
  • org.users:read (scope users:*)
  • orgs:read (scope org:*)

For more information about access control, refer to the Grafana Access Control documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.