# Grafana IRM

Grafana IRM is an incident response management platform that helps teams coordinate on-call rotations and respond effectively to critical incidents.

Through this integration, Apono enables your on-call staff to securely request and manage access to resources with just-in-time permissions, ensuring only the right people have access at the right time during critical events.

With this integration, you can:

* Enforce just-in-time access for on-call engineers
* Reduce risk by removing access when on-call shifts end
* Align incident response responsibilities with least-privilege access

***

### Prerequisite

<table><thead><tr><th width="204.6103515625">Item</th><th>Description</th></tr></thead><tbody><tr><td><strong>Grafana Portal URL</strong></td><td><p>Public URL of your Grafana portal</p><p><strong>Example</strong>: <em>https://your-org.grafana.net</em></p></td></tr><tr><td><strong>Grafana API key</strong></td><td><p><a href="https://grafana.com/docs/grafana-cloud/security-and-account-management/authentication-and-permissions/service-accounts/#to-add-a-token-to-a-service-account">Randomly generated string</a> used as an alternative to a password when accessing Grafana’s HTTP API</p><p>The API token must contain the following roles:</p><ul><li><strong>IRM: Schedules Reader</strong></li><li><strong>IRM: User Settings Reader</strong></li></ul><p>Be sure to copy the key after it has been generated.</p></td></tr><tr><td><strong>Grafana OnCall URL</strong></td><td><p>Base URL of your Grafana IRM OnCall API endpoint</p><p>Follow these steps to obtain the URL:</p><ol><li>In Grafana, click <strong>Alerts &#x26; IRM > IRM > Settings > Admin &#x26; API</strong> tab.</li><li>Under <strong>OnCall API URL</strong>, copy the URL. <strong>Example</strong>: <em>https://incident-prod-us-east-3.grafana.net/oncall</em>.</li></ol></td></tr></tbody></table>

***

### Integrate Grafana IRM

<figure><img src="/files/ykXjSWjRZUkGJJaTc28f" alt="" width="563"><figcaption><p>Grafana IRM tile</p></figcaption></figure>

Follow these steps to complete the integration:

1. On the [**Catalog**](https://app.apono.io/catalog?search=grafana+irm) tab, click **Grafana IRM**. The **Add Integration** page appears.
2. Enter a unique, alphanumeric, user-friendly **Integration Name**. This name is used to identify the integration when constructing an access flow.
3. Enter your **Grafana Portal URL**.
4. Enter your **Grafana OnCall URL**.
5. Under **Secret Store**, on the **APONO** tab, enter your Grafana **Api Key**.
6. Click **Connect**.

#### Usage

Now that you have completed this integration, you can use Grafana IRM to define the grantee or approver in an access flow.

You can configure access flows using Grafana IRM in the following ways.

<table><thead><tr><th width="179.2003173828125">Use</th><th>Example</th></tr></thead><tbody><tr><td><strong>Define a grantee</strong></td><td><p>Allow the current on-call engineer to request access to specific resources</p><p>Follow the guidance in these articles to use Grafana IRM to define a grantee:</p><ul><li><a href="/pages/sVn2oYvXxhOI9ZIEDDvo#define-permitted-requestors">Define permitted requestors (Self Serve Access Flows)</a></li><li><a href="/pages/6AmJIkxmv8PL0PY3GqOK#define-permitted-users">Define permitted users (Automatic Access Flows)</a></li></ul></td></tr><tr><td><strong>Define an approver</strong></td><td><p>Allow the current on-call engineer to approve access requests to specific resources</p><p>Follow the guidance in this article to use Grafana IRM to define a grantee:</p><ul><li><a href="/pages/sVn2oYvXxhOI9ZIEDDvo#set-up-custom-approval">Set up custom approval (Self Serve Access Flows)</a></li></ul></td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.apono.io/docs/additional-integrations/incident-response-integrations/grafana-irm.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.