Labels for access control¶
Label-based access control in PMM allows you to manage who has access to metrics based on labels. By creating roles, you can specify which data can be queried based on specific label criteria, for instance, allowing the QA team to view data related to test environments.
With Label-based access control, you can associate multiple labels with a role, ensuring only data from series that match your defined labels is returned.
Standard vs custom labels¶
PMM supports standard as well as custom labels. PMM automatically assigns standard labels. You can also set standard labels when an object (Node, Service, or Agent) is created. Custom labels are assigned and updated only by a user.
Examples
| Label Type | Object | Label name | Example |
|---|---|---|---|
| Standard | Node | node_id | /node_id/123 |
| Service | service_type | - mysql, mongodb, postgresql etc. | |
| Custom | Node, Service, Agent | Any string matching regular expression: [a-zA-Z_][a-zA-Z0-9_]*. Also, it cannot start with two underscores. |
owner=”joe” _rack=”12345” |
Adding labels¶
You can add custom or standard labels in PMM while adding a service for monitoring in PMM.
Using PMM UI¶
To set the labels using the user interface:
-
From the Main menu, go to PMM Configuration > PMM Services > Add Service.
-
Select the service you want to add to PMM for monitoring. The page to add the service opens.
-
Enter the details such as Hostname, Service name, Port, Username, Password, etc., along with Label or Custom labels.
Using pmm-admin¶
You can also assign labels using pmm-admin.
Get expert help¶
If you need assistance, visit the community forum for comprehensive and free database knowledge, or contact our Percona Database Experts for professional support and services.