Grafana Tempo: Auth & Access Control
Docs-backedDefault: no authentication (network-isolate in production). Basic auth: configure via reverse proxy. Grafana Cloud Tempo: Bearer token via Grafana Cloud API key. HTTPS enforced on Grafana Cloud. Self-hosted: operator-managed security. OpenTelemetry SDK: configure exporter endpoint (OTEL_EXPORTER_OTLP_ENDPOINT=http://{tempo}:4318) — no auth by default for self-hosted. Multi-tenancy: X-Scope-OrgID header for tenant isolation.