Lea has been added to the "wmde" LDAP group in the linked subtask.

This should also resolve this. The same comments on T199965#4477710 also apply here.

It doesn't look like lea has been added to the grafana-admin ldap group or the nda ldap group, so I don't believe she will currently be able to log in to grafana?
Or are the wikitech docs outdated?
The wmde ldap group certainly doesn't provide this access.

For convenience: https://tools.wmflabs.org/ldap/user/lea-wmde

Indeed, as there is overlap with the NDA group (which has many more users)

As far as I understand it grafana-admin should be used when only grafana admin panel access is needed.

Well, if access to grafana requires an NDA and signing an NDA means being added to the group called "nda" and that group gives access to grafana.. then i don't know what grafana-admin would be used for.

Adding her to the "nda" group.

In T199966#4499424, @Dzahn wrote:

Well, if access to grafana requires an NDA and signing an NDA means being added to the group called "nda" and that group gives access to grafana.. then i don't know what grafana-admin would be used for.

This echos some of my thoughts on a previous phab ticket on a similar discussion :)

Change 452450 had a related patch set uploaded (by Dzahn; owner: Dzahn):
[operations/puppet@production] admins: add Lea Voget to ldap admins (wmde,nde)

https://gerrit.wikimedia.org/r/452450

Change 452450 merged by Dzahn:
[operations/puppet@production] admins: add Lea Voget to ldap admins (wmde,nde)

https://gerrit.wikimedia.org/r/452450