> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Grafana

> Connect your Grafana account to Oleria to continuously discover user and group access across your observability platform.

Grafana is an observability platform. Connect your Grafana account to Oleria to bring user and group access into your identity and access graph.

## What Oleria discovers

* User accounts and profile attributes synced from Grafana's directory.
* Groups and their memberships.

Oleria uses this data for dormant account detection and access reviews, refreshed on Oleria's [regular sync schedule](/integrations/overview.md#sync-model).

## Prerequisites

* Admin access in Grafana with permission to enable SCIM provisioning and generate a SCIM token.
* A Grafana plan that includes SCIM provisioning (Grafana Enterprise or Grafana Cloud, with SAML enabled).
* Admin access on the Oleria platform to add a new integration.

> [!NOTE]
>
> Oleria must be able to reach a self-managed Grafana Enterprise host over HTTPS. Contact [support@oleria.com](mailto:support@oleria.com) to allowlist its exact hostname before you connect.

## Get your SCIM credentials from Grafana

**1. Enable SCIM provisioning in Grafana**

Sign in to Grafana as an admin and turn on SCIM provisioning in **Administration > Users and access > SCIM**. Then generate a SCIM token.

**2. Copy your SCIM Base URL and Authentication Token**

Copy both values before you leave the page - you'll paste them into Oleria in the next section:

* **SCIM Base URL** - the SCIM 2.0 endpoint Grafana shows when you enable provisioning.
* **Authentication Token** - the SCIM bearer token.

> [!NOTE]
>
> Copy the token now and store it securely. Rotate it per your organization's security policy.

## Connect Grafana to Oleria

**1. Open the integration**

Go to your Oleria workspace, select **Integrations**, then select the **Grafana** tile.

**2. Complete the connection form**

Fill in the connection form:

| Field | Notes |
| :- | :- |
| Instance Name | Optional. Short, recognizable label for this connection (for example, `grafana-prod`). |
| SCIM Base URL | Required. The SCIM 2.0 endpoint copied from Grafana. |
| Authentication Token | Required. The SCIM bearer token from Grafana. |

**3. Save the integration**

Select **Connect** to validate the credentials and save the integration.

## Verify the integration

Confirm the new instance appears on the **Connected** tab of your Oleria **Integrations** page with a status of **Healthy**. Oleria syncs users and groups from Grafana on its [regular sync schedule](/integrations/overview.md#sync-model) once the initial sync completes.

> [!NOTE]
>
> If you regenerate the SCIM token in Grafana, update the **Authentication Token** in Oleria by editing the integration.

## Remediation actions

Oleria can also take these actions in Grafana when the SCIM token can update users and groups:

* Enable or disable a user account
* Add or remove a user from a group
* Create a new user or group

> [!NOTE]
>
> Oleria doesn't check the SCIM token's permissions until an action runs. If an action fails, confirm the SCIM token can update users and groups in Grafana.

## Contact us

For questions about this integration, contact us at [support@oleria.com](mailto:support@oleria.com).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.