Configure Team Sync

Grafana keeps track of all synchronized users in teams, and you can see which users have been synchronized in the team members list, see label in screenshot. This mechanism allows Grafana to remove an existing synchronized user from a team when its group membership changes. This mechanism also enables you to manually add a user as member of a team, and it will not be removed when the user signs in. This gives you flexibility to combine LDAP group memberships and Grafana team memberships.

• Azure AD
• LDAP
• SAML

1. In Grafana, navigate to Configuration > Teams.

3. Insert the value of the group you want to sync with. This becomes the Grafana GroupID. Examples:

   • For LDAP, this is the LDAP distinguished name (DN) of LDAP group you want to synchronize with the team.
   • For Auth Proxy, this is the value we receive as part of the custom header.
4. Click Add group to save.

When using LDAP, you can use a wildcard (*) in the common name attribute (CN) to match any group in the corresponding Organizational Unit (OU).