HTTP Alerting Provisioning API - forbidden for the editor

[kwarunek]

What happened?

I have a user with a role Editor in the org. User is able to manage alert rules/contact points folders without a problem through the frontend (Grafana UI). But if I would like to use that user credentials with Terraform provider (generally with the HTTP API) I get erros.

What did you expect to happen?

I would expect that users could interact with Grafana via API as with frontend. The workaound is to set Admin role, or service tokens with admin role which I can't do since I don't want the team to manipulate datasourceusers etc.

Did this work before?

no

How do we reproduce it?

1.Create user with Editor role
2. Try to get ds via API - curl -u 'user:123456' http://localhost:3000/api/.... -H 'x-grafana-org-id: 2'
or manage alerts/folders

Is the bug inside a dashboard panel?

No response

Environment (with versions)?

Grafana: 10
OS: Linux
Browser: irrelevant

Grafana platform?

Kubernetes

Datasource(s)?

No response

[kwarunek]

Related 86303