Grafana/Monitoring SSO RBAC Access Denied

turning on SSO for monitoring throws rbac_access_denied_matched_policy[none] with SSO in grafana. This may be an authorization policy issue within grafana or monitoring, or it could be related to authservice. Opening this ticket to investigate. It was also reported by a customer.