# Grafana Cloud

> Connect a Grafana Cloud access policy token to LevelFour.

Source: https://docs.levelfour.ai/connectors/grafana


## Prerequisites

* A Grafana Cloud organization.
* The Cloud Portal Admin role, to create the access policy.

## Connect

### Create an access policy token in Grafana Cloud

In the Grafana Cloud portal, go to **Security > Access Policies > Create access policy**. Set the realm to your whole organization, and add the scopes `billing-metrics:read` and `orgs:read`.

Create a token on the policy and copy it, along with your organization slug from the grafana.com org URL.

### Add it to LevelFour

Open **Connect Providers**, select **Grafana Cloud**, and paste the token and org slug. Click **Add Access policy token**.

## Confirming it worked

The connection moves to **Connected**. Your first data appears within a day.

## Rotating or removing access

### Rotating the credential

Create a new token on the same access policy in Grafana Cloud, paste it into **Connect Providers**, then delete the old token.

### Removing access

Disconnect Grafana Cloud under **Connect Providers**, then delete the token or the access policy in Grafana Cloud.

## Troubleshooting

| Symptom                                        | What to do                                                                                                      |
| ---------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| The connection fails with a permission error   | Confirm the access policy has both `billing-metrics:read` and `orgs:read`                                       |
| No data appears until well into the next month | Expected. Grafana Cloud only finalizes a month's billed usage on the first of the following month               |
| The token stops working                        | Access policy tokens can be set to expire. Check the policy's expiration and issue a new token before it lapses |

## Next

* [Connect Providers](/connectors) lists every provider you can connect