You’ve got a shiny new Percona Monitoring & Management instance standing by and want to move existing users over. This blog is a quick work around for migrating PMM users to another PMM (Grafana) instance “manually”.<\/p>\n\n\n\n
Note: This blog is only about user migration trick. A tool for exporting performance metrics and QAN data is pmm_dump<\/a>. If you’re looking for a complete migration from PMM 2.x to 3.x, you have a guide here<\/a>.<\/em><\/p>\n\n\n\n The requirement here was to migrate only PMM users to a new environment but not the data or queries.<\/p>\n\n\n\n All PMM users are actually Grafana users under the hood, stored in a Postgres DB (by default). So it is possible to get those credentials and move them to the new instance without doing much is what I think!<\/p>\n\n\n\n Verify what’s the Grafana’s backend database<\/p>\n\n\n\n Connect to database and review users<\/p>\n\n\n\n One may think that we can copy username and password hash but it is not that simple. We also need to add a pinch of NaCl AKA Salt. <\/p>\n\n\n\n In password authentication, “salt” is a unique random string of characters added to a password before it’s hashed to provide additional security. Thus we have to make sure to copy the “salt” values.<\/p>\n\n\n\n I believe you’ve understood the next step! Connect to the target PMM, execute these insert statements and you’re done.<\/p>\n\n\n\n Hope someone somewhere finds this post helpful.<\/p>\n","protected":false},"excerpt":{"rendered":"You’ve got a shiny new Percona Monitoring & Management instance standing by and want to move existing users over. This blog is a quick work around for migrating PMM users…\n","protected":false},"author":1,"featured_media":3483,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[8,1089],"tags":[1109,1112,427,1108,1111,1110],"class_list":["post-3482","post","type-post","status-publish","format-standard","has-post-thumbnail","category-mysql","category-percona-monitoring-and-management","tag-grafana-user-migration","tag-grafana-users","tag-mysql","tag-pmm-migration","tag-pmm-user-migration","tag-user-migration"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\tPMM User Migration<\/h2>\n\n\n\n
# Inside PMM container\n[root@1167d2c03dc2 ~] # grep type \/etc\/grafana\/grafana.ini\n# You can configure the database connection by specifying type, host, name, user and password\ntype = postgres\n[root@1167d2c03dc2 ~] #<\/code><\/pre>\n\n\n\npsql -h localhost -p 5432 -U grafana -d grafana\n\nSELECT\n ou.id AS org_user_id,\n ou.org_id,\n ou.role,\n u.id AS user_id,\n u.login,\n u.email,\n u.name,\n u.is_admin,\n u.salt,\n u.password\nFROM\n org_user ou\nJOIN\n \"user\" u ON ou.user_id = u.id\nORDER BY ou.id;<\/code><\/pre>\n\n\n\ngrafana=> SELECT ou.id AS org_user_id, ou.org_id, ou.role, u.id AS user_id, u.login, u.email, u.name, u.is_admin,u.salt, u.password FROM org_user ou JOIN \"user\" u ON ou.user_id = u.id ORDER BY ou.id;\n org_user_id | org_id | role | user_id | login | email | name | is_admin | salt | p\nassword\n-------------+--------+--------+---------+-------+-----------------+-------+----------+------------+------------------------------------------------\n------------------------------------------------------\n 1 | 1 | Admin | 1 | admin | admin@localhost <\/strong>| | t | k4XvdKrvBv | ba4af563a729c06fc95b1c921a598b6de2<\/strong>\n 2 | 1 | Viewer | 2 | kedar | kedar<\/strong> | kedar | f | k4XvdKrvBv | 5b1c921a598b6de2c55d906e900db04c82f<\/code><\/pre>\n\n\n\nThe Magic happens here<\/h2>\n\n\n\n
grafana=> \\x auto\nExpanded display is used automatically.\ngrafana=> SELECT\n 'INSERT INTO \"user\" (id, version, email, name, login, password, salt, email_verified, theme, created, updated, is_admin, is_disabled, last_seen_at, org_id) VALUES (' ||\n u.id || ', ' || u.version || ', ''' || REPLACE(u.email, '''', '''''') || ''', ''' || REPLACE(u.name, '''', '''''') || ''', ''' || REPLACE(u.login, '''', '''''') || ''', ''' || u.password || ''', ''' || u.salt || ''', ' || u.email_verified || ', ''' || u.theme || ''', ''' || u.created || ''', ''' || u.updated || ''', ' || u.is_admin || ', ' || u.is_disabled || ', ''' || u.last_seen_at || ''', ' || u.org_id || ');' AS insert_user_command,\n CASE\n WHEN ou.user_id IS NOT NULL THEN\n 'INSERT INTO org_user (id, org_id, user_id, role, created, updated) VALUES (' ||\n ou.id || ', ' || ou.org_id || ', ' || ou.user_id || ', ''' || ou.role || ''', ''' || ou.created || ''', ''' || ou.updated || ''');'\n ELSE\n '-- User ' || u.login || ' has no org_user entry to migrate.'\n END AS insert_org_user_command\nFROM \"user\" u\nLEFT JOIN org_user ou ON u.id = ou.user_id\nORDER BY u.id, ou.org_id;\n-[ RECORD 1 ]-----------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------\ninsert_user_command | INSERT INTO \"user\" (id, version, email, name, login, password, salt, email_verified, theme, created, updated, is_admin, is_disabled, last_seen_at, org_id) VALUES (1, 0, 'admin@localhost', '', 'admin', '65c0a138b91f2793ec9b545352355a7b658dkedar.nitty-witty.com0a03b736918ba4af563a729c06fc9d906e900db04c82f', 'k4XvdKrvBv', false, '', '2025-01-01 11:14:30', '2025-07-30 08:16:29', true, false, '2025-07-30 08:38:40', 1);\ninsert_org_user_command | INSERT INTO org_user (id, org_id, user_id, role, created, updated) VALUES (1, 1, 1, 'Admin', '2025-01-01 11:14:30', '2025-01-01 11:14:30');\n-[ RECORD 2 ]-----------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------\ninsert_user_command | INSERT INTO \"user\" (id, version, email, name, login, password, salt, email_verified, theme, created, updated, is_admin, is_disabled, last_seen_at, org_id) VALUES (2, 0, 'kedar', 'kedar', 'kedar', '2e2bc60603c77811b4fe141271bc49aecekedar.nitty-witty.comdb0b11d1f921a0f19c7777dae68ebeb2d2f8bce643911', 'lwcv2cuO70', false, '', '2025-07-30 08:18:53', '2025-07-30 08:18:53', false, false, '2025-07-30 08:28:24', 1);\ninsert_org_user_command | INSERT INTO org_user (id, org_id, user_id, role, created, updated) VALUES (2, 1, 2, 'Viewer', '2025-07-30 08:18:53', '2025-07-30 08:18:53');\n-[ RECORD 3 ]-----------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------\ninsert_user_command | INSERT INTO \"user\" (id, version, email, name, login, password, salt, email_verified, theme, created, updated, is_admin, is_disabled, last_seen_at, org_id) VALUES (5, 0, 'aarya', 'aarya', 'aarya', '1a9ecc6b962db8028fe0a8ac1319208a1d29110c1017f2a79908f78a111fb86067c3b051ae3af9dde07a09cd49080c7c5d8b', 'N2nFw762t3', false, '', '2025-07-30 08:30:11', '2025-07-30 08:30:11', false, false, '2015-06-30 08:30:11', 1);\ninsert_org_user_command | INSERT INTO org_user (id, org_id, user_id, role, created, updated) VALUES (5, 1, 5, 'Viewer', '2025-07-30 08:30:11', '2025-07-30 08:30:11');\n-[ RECORD 4 ]-----------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------\ninsert_user_command | INSERT INTO \"user\" (id, version, email, name, login, password, salt, email_verified, theme, created, updated, is_admin, is_disabled, last_seen_at, org_id) VALUES (6, 0, 'rudra', 'rudra', 'rudra', '99752b5c4ca5b20a049d193551d566105f5ekedar.nitty-witty.com2491ff058f1e8b808d8bd9a555687655118c0081ba7', 'nLOfMsnE4m', false, '', '2025-07-30 08:30:29', '2025-07-30 08:30:29', false, false, '2015-06-30 08:30:29', 1);\ninsert_org_user_command | INSERT INTO org_user (id, org_id, user_id, role, created, updated) VALUES (6, 1, 6, 'Viewer', '2025-07-30 08:30:29', '2025-07-30 08:30:29');<\/code><\/pre>\n\n\n\n