Grafana

By defining `password` and `basicAuthPassword` under secureJsonData property Grafana encrypts them securely as an encrypted blob in the database. The response then lists the encrypted fields under secureJsonFields. If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:create`

Add invite.

Adds a global user to the current organization. If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:add` with scope `users:*`.

Adds a global user to the current organization. If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:add` with scope `users:*`.

Add External Group.

Add Team Member.

You need to have a permission with action `teams.roles:add` and scope `permissions:type:delegate`.

Assign a role to a specific user. For bulk updates consider Set user role assignments. You need to have a permission with action `users.roles:add` and scope `permissions:type:delegate`. `permissions:type:delegate` scope ensures that users can only assign roles which have same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to assign a role which will allow to do that. This is done to prevent escalation of privileges.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users:create`. Note that OrgId is an optional parameter that can be used to assign a new user to a different organization when `auto_assign_org` is set to `true`.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users:delete` and scope `global.users:*`.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users:disable` and scope `global.users:1` (userIDScope).

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users:enable` and scope `global.users:1` (userIDScope).

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `settings:read` and scopes: `settings:*`, `settings:auth.saml:` and `settings:auth.saml:enabled` (property level).

Only works with Basic Authentication (username and password). See introduction for an explanation. If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `server:stats:read`.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.authtoken:list` and scope `global.users:*`.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.logout` and scope `global.users:*`.

You need to have a permission with action `provisioning:reload` with scope `provisioners:accesscontrol`.

Reloads the provisioning config files for dashboards again. It won’t return until the new provisioned entities are already stored in the database. In case of dashboards, it will stop polling for changes in dashboard files and then restart it with new configurations after returning. If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `provisioning:reload` and scope `provisioners:dashboards`.

Reloads the provisioning config files for datasources again. It won’t return until the new provisioned entities are already stored in the database. In case of dashboards, it will stop polling for changes in dashboard files and then restart it with new configurations after returning. If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `provisioning:reload` and scope `provisioners:datasources`.

Reloads the provisioning config files for plugins again. It won’t return until the new provisioned entities are already stored in the database. In case of dashboards, it will stop polling for changes in dashboard files and then restart it with new configurations after returning. If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `provisioning:reload` and scope `provisioners:plugin`.

Revokes the given auth token (device) for the user. User of issued auth token (device) will no longer be logged in and will be required to authenticate again upon next activity. If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.authtoken:update` and scope `global.users:*`.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.password:update` and scope `global.users:*`.

Only works with Basic Authentication (username and password). See introduction for an explanation. If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.permissions:update` and scope `global.users:*`.

Fetch data source resources.

TODO: Implement

Changes the password for the user.

Sends a health check request to the plugin datasource identified by the UID.

clean cache for a single data source

Create gcom access token.

Add correlation.

Snapshot public mode should be enabled or authentication is required.

If nested folders are enabled then it additionally expects the parent folder UID. Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders/{folder_uid}

Creates a new library element.

Only works if [users.allow_org_create](https://grafana.com/docs/grafana/latest/administration/configuration/#allow_org_create) is set.

Please refer to [new API](?api=playlist.grafana.app-v1).

Create public dashboard for a dashboard

Adds new query to query history.

Create a recording rule that is then registered and started.

It returns a 422 if there is not an existing prometheus data source configured.

Available to org admins only and with a valid license. You need to have a permission with action `reports.admin:create`.

Creates a new custom role and maps given permissions to that role. Note that roles with the same prefix as Fixed Roles can’t be created. You need to have a permission with action `roles:write` and scope `permissions:type:delegate`. `permissions:type:delegate` scope ensures that users can only create custom roles with the same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to create a custom role which allows to do that. This is done to prevent escalation of privileges.

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:write` scope: `serviceaccounts:*` Requires basic authentication and that the authenticated user is a Grafana Admin.

Create a migration session.

If the snapshot initialization is successful, the snapshot uid is returned.

Add Team.

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)

Proxies all calls to the actual data source.

Proxies all calls to the actual data source.

Proxies all calls to the actual data source. The data source should support POST methods for the specific path and role as defined

Deletes the annotation that matches the specified ID.

Deletes a cloud migration token.

Delete a correlation.

Will delete the dashboard given the specified unique identifier (uid). Use: /apis/dashboard.grafana.app/v1/namespaces/{ns}/dashboards/{uid}

Delete Snapshot by Key.

Snapshot public mode should be enabled or authentication is required.

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:delete` and scopes: `datasources:*`, `datasources:name:*` and `datasources:name:test_datasource` (single data source).

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:delete` and scopes: `datasources:*`, `datasources:uid:*` and `datasources:uid:kLtEtcRGk` (single data source).

Deletes an existing folder identified by UID along with all dashboards (and their alerts) stored in the folder. This operation cannot be reverted. If nested folders are enabled then it also deletes all the subfolders. Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders/{folder_uid}

Deletes an existing library element as specified by the UID. This operation cannot be reverted. You cannot delete a library element that is connected. This operation cannot be reverted.

Removes the license stored in the Grafana database. Available in Grafana Enterprise v7.4+. You need to have a permission with action `licensing:delete`.

Delete Organization.

Please refer to [new API](?api=playlist.grafana.app-v1).

Delete public dashboard for a dashboard

Deletes an existing query in query history as specified by the UID. This operation cannot be reverted.

Delete removes the rule from the registry and stops it.

Delete the remote write target.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports.delete` with scope `reports:id:<report ID>`. Requesting reports using the internal id will stop workgin in the future Use the reporting apiserver to manage reports. See: /apis/reporting.grafana.app/

Delete a role with the given UID, and it’s permissions. If the role is assigned to a built-in role, the deletion operation will fail, unless force query param is set to true, and in that case all assignments will also be deleted. You need to have a permission with action `roles:delete` and scope `permissions:type:delegate`. `permissions:type:delegate` scope ensures that users can only delete a custom role with the same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to delete a custom role which allows to do that.

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:delete` scope: `serviceaccounts:id:1` (single service account)

Delete a migration session by its uid.

Delete Team By ID.

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account) Requires basic authentication and that the authenticated user is a Grafana Admin.

disable cache for a single data source

enable cache for a single data source

Returns an indicator to check if fine-grained access control is enabled or not. You need to have a permission with action `status:accesscontrol` and scope `services:accesscontrol`.

Get Annotation by ID.

Find all the event tags created in the annotations.

Starting in Grafana v6.4 regions annotations are now returned in one entity that now includes the timeEnd property.

Fetch the cloud migration token if it exists.

Gets a correlation.

Gets all correlations.

Gets all correlations originating from the given data source.

Get current Organization.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `orgs.quotas:read` and scope `org:id:1` (orgIDScope).

You need to have a permission with action `licensing.reports:read`.

You need to have a permission with action `licensing.reports:read`.

Optional query parameter `apiVersion` selects the Kubernetes API version used to load the dashboard first (for example `v1beta1`). If that request fails, the default version is used instead. When omitted, only the default is used. Will return the dashboard given the dashboard unique identifier (uid). Use: /apis/dashboard.grafana.app/v1/namespaces/{ns}/dashboards/{uid}

Use: /apis/dashboard.grafana.app/v1/namespaces/{ns}/dashboards/{uid}/access

Get Snapshot by Key.

Get all dashboards tags of an organization.

Get a specific dashboard version using UID.

Gets all existing versions for the dashboard using UID.

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:read` and scopes: `datasources:*`, `datasources:name:*` and `datasources:name:test_datasource` (single data source).

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:read` and scopes: `datasources:*`, `datasources:uid:*` and `datasources:uid:kLtEtcRGk` (single data source).

get cache config for a single data source

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:read` and scopes: `datasources:*`, `datasources:name:*` and `datasources:name:test_datasource` (single data source).

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:read` and scope: `datasources:*`.

Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders/{folder_uid}

Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders/{folder_uid}

Gets all existing permissions for the folder with the given `uid`.

It returns all folders that the authenticated user has permission to view. If nested folders are enabled, it expects an additional query parameter with the parent folder UID and returns the immediate subfolders that the authenticated user has permission to view. If the parameter is not supplied then it returns immediate subfolders under the root that the authenticated user has permission to view. Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders

apiHealthHandler will return ok if Grafana's web server is running and it can access the database. If the database cannot be accessed it will return http status code 503.

NOTE: the home dashboard is configured in preferences. This API will be removed in G13

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `ldap.status:read`.

Returns a library element with the given name.

Returns a library element with the given UID.

Returns a list of connections for a library element based on the UID specified.

Returns a list of all library elements the authenticated user has permission to view. Use the `perPage` query parameter to control the maximum number of library elements returned; the default limit is `100`. You can also use the `page` query parameter to fetch library elements from any page other than the first one.

You need to have a permission with action `licensing:read`.

It exposes the SP (Grafana's) metadata for the IdP's consumption.

Get Organization by ID.

Get Organization by Name.

Use /apis/preferences.grafana.app/v1/namespaces/{namespace}/preferences/namespace

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `orgs.quotas:read` and scope `org:id:1` (orgIDScope).

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:read` with scope `users:*`.

Returns all org users within the current organization. Accessible to users with org admin role. If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:read` with scope `users:*`.

Returns all org users within the current organization, but with less detailed information. Accessible to users with org admin role, admin in any folder or admin of any team. Mainly used by Grafana UI for providing list of users when adding team members and when editing folder/dashboard permissions.

Get pending invites.

Please refer to [new API](?api=playlist.grafana.app-v1).

Please refer to [new API](?api=playlist.grafana.app-v1) instead (items are included in the playlist spec).

You need to have a permission with action `settings:read` with scope `settings:auth.<provider>:*`.

Get annotations for a public dashboard

Get public dashboard by dashboardUid

Return the prometheus remote write target.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports:read` with scope `reports:id:<report ID>`. Requesting reports using the internal id will stop workgin in the future Use the reporting apiserver to manage reports. See: /apis/reporting.grafana.app/

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports.settings:read`x.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports:read` with scope `reports:*`.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports:read` with scope `reports:*`.

Get the resource dependencies graph for the current set of migratable resources.

Get a description of a resource's access control properties.

Get permissions for a resource.

Get a role for the given UID. You need to have a permission with action `roles:read` and scope `roles:*`.

Get role assignments for the role with the given UID. Does not include role assignments mapped through group attribute sync. You need to have a permission with action `teams.roles:list` and scope `teams:id:*` and `users.roles:list` and scope `users:id:*`.

GetLogout initiates single logout process.

Get a cloud migration session by its uid.

Get a list of all cloud migration sessions that have been created.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports.settings:read`.

Get a list of snapshots for a session.

Get snapshot sharing settings.

Get (current authenticated user)

Return a list of all organizations of the current user.

Return a list of all teams that the current user is member of.

There might be two possible requests: 1. Logout response (callback) when Grafana initiates single logout and IdP returns response to logout request. 2. Logout request when another SP initiates single logout and IdP sends logout request to the Grafana, or in case of IdP-initiated logout.

Get metadata about a snapshot, including where it is in its processing and final results.

Check license availability.

You need to have a permission with action `ldap.status:read`.

Get Team By ID.

Get External Groups.

Retrieves LBAC rules for a team.

Get Team Members.

Get Team Preferences.

Return a list of all auth tokens (devices) that the actual user currently have logged in from.

Get user by id.

Get user by login or email.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `ldap.user:read`.

Get organizations for user identified by id.

Use /apis/preferences.grafana.app/v1/namespaces/{namespace}/preferences/user-{uid}

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.quotas:list` and scope `global.users:1` (userIDScope).

Fetch user quota.

Get teams for user identified by id.

Import dashboard.

Interpolate dashboard. This is an experimental endpoint under dashboardLibrary or suggestedDashboards feature flags and is subject to change.

You need to have a permission with action `settings:read` with scope `settings:auth.<provider>:*`.

Lists all devices within the last 30 days

Get list of public dashboards

Lists all rules in the database: active or deleted.

Gets all existing roles. The response contains all global and organization local roles, for the organization which user is signed in. You need to have a permission with action `roles:read` and scope `roles:*`. The `delegatable` flag reduces the set of roles to only those for which the signed-in user has permissions to assign.

List search sorting options.

You need to have a permission with action `teams.roles:read` and scope `teams:id:<team ID>`.

Lists the roles that have been directly assigned to the given teams. You need to have a permission with action `teams.roles:read` and scope `teams:id:*`.

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:read` scope: `global:serviceaccounts:id:1` (single service account) Requires basic authentication and that the authenticated user is a Grafana Admin.

Lists the roles that have been directly assigned to a given user. The list does not include built-in roles (Viewer, Editor, Admin or Grafana Admin), and it does not include roles that have been inherited from a team. You need to have a permission with action `users.roles:read` and scope `users:id:<user ID>`.

Lists the roles that have been directly assigned to the given users. The list does not include built-in roles (Viewer, Editor, Admin or Grafana Admin), and it does not include roles that have been inherited from a team. You need to have a permission with action `users.roles:read` and scope `users:id:*`.

Delete multiple annotations.

Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders/{folder_uid}, Changing the parent folder annotation

Updates one or more properties of an annotation that matches the specified ID. This operation currently supports updating of the `text`, `tags`, `time` and `timeEnd` properties. This is available in Grafana 6.0.0-beta2 and above.

Use /apis/preferences.grafana.app/v1/namespaces/{namespace}/preferences/namespace

Partially updates the SSO Settings for a provider. Only provided fields are updated. You need to have a permission with action `settings:write` and scope `settings:auth.<provider>:*`.

Updates comment for query in query history as specified by the UID.

Use /apis/preferences.grafana.app/v1/namespaces/{namespace}/preferences/user-{uid}

It performs Assertion Consumer Service (ACS).

Creates an annotation in the Grafana database. The dashboardId and panelId fields are optional. If they are not specified then an organization annotation is created and can be queried in any dashboard that adds the Grafana annotations data source. When creating a region annotation include the timeEnd property. The format for `time` and `timeEnd` should be epoch numbers in millisecond resolution. The response for this HTTP request is slightly different in versions prior to v6.4. In prior versions you would also get an endId if you where creating a region. But in 6.4 regions are represented using a single event with time and timeEnd properties.

Creates a new dashboard or updates an existing dashboard. Note: This endpoint is not intended for creating folders, use `POST /api/folders` for that. Use: /apis/dashboard.grafana.app/v1/namespaces/{ns}/dashboards

Creates an annotation by using Graphite-compatible event format. The `when` and `data` fields are optional. If `when` is not specified then the current time will be used as annotation’s timestamp. The `tags` field can also be in prior to Graphite `0.10.0` format (string with multiple tags being separated by a space).

You need to have a permission with action `licensing:write`.

Manually ask license issuer for a new token. Available in Grafana Enterprise v7.4+. You need to have a permission with action `licensing:write`.

There might be two possible requests: 1. Logout response (callback) when Grafana initiates single logout and IdP returns response to logout request. 2. Logout request when another SP initiates single logout and IdP sends logout request to the Grafana, or in case of IdP-initiated logout.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `ldap.user:sync`.

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:query`.

Get results for a given panel on a public dashboard

You need to have a permission with action `licensing:read`.

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `ldap.config:reload`.

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:remove` with scope `users:*`.

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:remove` with scope `users:*`.

Removes the SSO Settings for a provider. You need to have a permission with action `settings:write` and scope `settings:auth.<provider>:*`.

Remove External Group.

Remove Member From Team.

You need to have a permission with action `teams.roles:remove` and scope `permissions:type:delegate`.

Revoke a role from a user. For bulk updates consider Set user role assignments. You need to have a permission with action `users.roles:remove` and scope `permissions:type:delegate`. `permissions:type:delegate` scope ensures that users can only unassign roles which have same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to unassign a role which will allow to do that. This is done to prevent escalation of privileges.

Available to all users and with a valid license.

Available to all users and with a valid license.

This API will be removed when /apis/dashboard.grafana.app/v1 is released. You can restore a dashboard by reading it from history, then creating it again.

Required permissions None

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:read` scope: `serviceaccounts:id:1` (single service account)

Revoke invite.

Revokes the given auth token (device) for the actual user. User of issued auth token (device) will no longer be logged in and will be required to authenticate again upon next activity.

Deletes all rule groups that were imported from Prometheus-compatible sources within the specified namespace.

Deletes a specific rule group if it was imported from a Prometheus-compatible source.

Gets Grafana-managed alert rules that were imported from Prometheus-compatible sources for a specified namespace (folder).

Gets a single rule group in Prometheus-compatible format if it was imported from a Prometheus-compatible source.

Gets all Grafana-managed alert rules that were imported from Prometheus-compatible sources, grouped by namespace.

Converts the submitted rule groups into Grafana-Managed Rules.

Deletes all rule groups that were imported from Prometheus-compatible sources within the specified namespace.

Deletes a specific rule group if it was imported from a Prometheus-compatible source.

Gets Grafana-managed alert rules that were imported from Prometheus-compatible sources for a specified namespace (folder).

Gets a single rule group in Prometheus-compatible format if it was imported from a Prometheus-compatible source.

Gets all Grafana-managed alert rules that were imported from Prometheus-compatible sources, grouped by namespace.

Converts the submitted rule groups into Grafana-Managed Rules.

Delete a specific alert rule by UID.

Delete rule group

Delete a contact point.

Delete a mute timing.

Delete a notification template group.

Export a mute timing in provisioning format.

Export all mute timings in provisioning format.

Get a specific alert rule by UID.

Export an alert rule in provisioning file format.

Get a rule group.

Export an alert rule group in provisioning file format.

Get all the alert rules.

Export all alert rules in provisioning file format.

Get all the contact points.

Export all contact points in provisioning file format.

Get a mute timing.

Get all the mute timings.

Get the notification policy tree.

Export the notification policy tree in provisioning file format.

Get a notification template group.

Get all notification template groups.

Create a new alert rule.

Create a contact point.

Create a new mute timing.

Update an existing alert rule.

Create or update alert rule group.

Update an existing contact point.

Replace an existing mute timing.

Sets the notification policy tree.

Updates an existing notification template group.

Clears the notification policy tree.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports.settings:write`xx.

Search

List snapshots.

Lists all devices within the last 30 days

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:read` scope: `serviceaccounts:*`

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users:read` with scope `users:*`.

Search all Organizations.

Please refer to [new API](?api=playlist.grafana.app-v1).

Returns a list of queries in the query history that matches the search criteria. Query history search supports pagination. Use the `limit` parameter to control the maximum number of queries returned; the default limit is 100. You can also use the `page` query parameter to fetch queries from any page other than the first one.

Search for team groups with optional filtering and pagination.

Team Search With Paging.

Returns all users that the authenticated user has permission to view, admin permission required.

Get users with paging.

Generate and send a report. This API waits for the report to be generated before returning. We recommend that you set the client’s timeout to at least 60 seconds. Available to org admins only and with a valid license. Only available in Grafana Enterprise v7.0+. This API endpoint is experimental and may be deprecated in a future release. On deprecation, a migration strategy will be provided and the endpoint will remain functional until the next major release of Grafana. You need to have a permission with action `reports:send`.

Available to org admins only and with a valid license. You need to have a permission with action `reports:send`.

set cache config for a single data source

Assigns permissions for a resource by a given type (`:resource`) and `:resourceID` to one or many assignment types. Allowed resources are `datasources`, `teams`, `dashboards`, `folders`, and `serviceaccounts`. Refer to the `/access-control/{resource}/description` endpoint for allowed Permissions.

Assigns permissions for a resource by a given type (`:resource`) and `:resourceID` to a built-in role. Allowed resources are `datasources`, `teams`, `dashboards`, `folders`, and `serviceaccounts`. Refer to the `/access-control/{resource}/description` endpoint for allowed Permissions.

Assigns permissions for a resource by a given type (`:resource`) and `:resourceID` to a team. Allowed resources are `datasources`, `teams`, `dashboards`, `folders`, and `serviceaccounts`. Refer to the `/access-control/{resource}/description` endpoint for allowed Permissions.

Assigns permissions for a resource by a given type (`:resource`) and `:resourceID` to a user or a service account. Allowed resources are `datasources`, `teams`, `dashboards`, `folders`, and `serviceaccounts`. Refer to the `/access-control/{resource}/description` endpoint for allowed Permissions.

Set role assignments for the role with the given UID. You need to have a permission with action `teams.roles:add` and `teams.roles:remove` and scope `permissions:type:delegate`, and `users.roles:add` and `users.roles:remove` and scope `permissions:type:delegate`.

Takes user emails, and updates team members and admins to the provided lists of users. Any current team members and admins not in the provided lists will be removed.

You need to have a permission with action `teams.roles:add` and `teams.roles:remove` and scope `permissions:type:delegate` for each.

Update the user’s role assignments to match the provided set of UIDs. This will remove any assigned roles that aren’t in the request and add roles that are in the set but are not already assigned to the user. Roles mapped through group attribute sync are not impacted. If you want to add or remove a single role, consider using Add a user role assignment or Remove a user role assignment instead. You need to have a permission with action `users.roles:add` and `users.roles:remove` and scope `permissions:type:delegate` for each. `permissions:type:delegate` scope ensures that users can only assign or unassign roles which have same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to assign or unassign a role which will allow to do that. This is done to prevent escalation of privileges.

Stars the given Dashboard for the actual user.

Adds star to query in query history as specified by the UID.

Test a recording rule.

Deletes the starring of the given Dashboard for the actual user.

Removes star from query in query history as specified by the UID.

Updates all properties of an annotation that matches the specified id. To only update certain property, consider using the Patch Annotation operation.

Updates a correlation.

Update current Organization.

Update current Organization's address.

This operation will remove existing permissions if they’re not included in the request.

Similar to creating a data source, `password` and `basicAuthPassword` should be defined under secureJsonData in order to be stored securely as an encrypted blob in the database. Then, the encrypted fields are listed under secureJsonFields section in the response. If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `datasources:write` and scopes: `datasources:*`, `datasources:uid:*` and `datasources:uid:1` (single data source).

Use: /apis/folder.grafana.app/v1/namespaces/{ns}/folders/{folder_uid}

Updates permissions for a folder. This operation will remove existing permissions if they’re not included in the request.

Updates an existing library element identified by uid.

Update Organization.

Update Organization's address.

Use /apis/preferences.grafana.app/v1/namespaces/{namespace}/preferences/namespace

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `orgs.quotas:write` and scope `org:id:1` (orgIDScope).

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users.role:update` with scope `users:*`.

If you are running Grafana Enterprise and have Fine-grained access control enabled you need to have a permission with action: `org.users.role:update` with scope `users:*`.

Please refer to [new API](?api=playlist.grafana.app-v1).

Inserts or updates the SSO Settings for a provider. You need to have a permission with action `settings:write` and scope `settings:auth.<provider>:*`.

Update public dashboard for a dashboard

Update the active status of a rule.

Available to org admins only and with a valid or expired license. You need to have a permission with action `reports.admin:write` with scope `reports:id:<report ID>`. Requesting reports using the internal id will stop workgin in the future Use the reporting apiserver to manage reports. See: /apis/reporting.grafana.app/

You need to have a permission with action `roles:write` and scope `permissions:type:delegate`. `permissions:type:delegate` scope ensures that users can only create custom roles with the same, or a subset of permissions which the user has.

Required permissions (See note in the [introduction](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api) for an explanation): action: `serviceaccounts:write` scope: `serviceaccounts:id:1` (single service account)

Update signed in User.

Update Team.

Updates LBAC rules for a team.

Update Team Member.

Update Team Preferences.

Update the user identified by id.

Update the email of user given a verification code.

Use /apis/preferences.grafana.app/v1/namespaces/{namespace}/preferences/user-{uid}

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.quotas:update` and scope `global.users:1` (userIDScope).

Upload a snapshot to the Grafana Migration Service for processing.

Switch user context to the given organization.

Get public dashboard for view