Locate the systemd file of that service:
pico /usr/lib/systemd/system/grafana-server
Add this 2 lines at service
[Service]
…
…
AmbientCapabilities = CAP_NET_BIND_SERVICE
CapabilityBoundingSet = CAP_NET_BIND_SERVICE
Run:
systemctl daemon-reload
Restart service
