(v24) About Dashboard Permissions

About Dashboard Permissions

This applies to: Visual Data Discovery

Dashboard permissions allow you to permit your entire tenant, groups within your tenant, or users within your tenant to read, write, or delete a dashboard. This allows you to share a dashboard with other users.

If a user belongs to a group that has the Administer Dashboards privilege enabled, the user can read, add, modify, or remove any dashboard in the tenant. However, if the user does not belong to a group with this privilege enabled, the user can still be granted permission to read, write, or delete specific dashboards in the tenant using dashboard permissions. Dashboard permissions allow users in an tenant or group to read, write, or delete a dashboard, regardless of any group privilege settings that ordinarily limit their ability to do so.

Note: To manage permissions of a dashboard, a user must meet one of the following criteria:

• Must be an administrator, belonging to the Administrators group or Content Distributors group.

• Must belong to a group with the Administer Dashboards (ROLE_ADMINISTER_DASHBOARDS) privilege enabled.

• Must belong to a group with the Manage Dashboard Permissions (ROLE_PERMISSION_DASHBOARDS) privilege enabled. If your user definition has only this privilege (and not the Administer Dashboards privilege), you will only be able to manage permissions for the dashboards for which you have READ permission.

  In addition, you may be restricted in which permissions you can assign. You can only assign permissions equivalent to your own. For example, if your user account has read permission for a dashboard, you can grant and revoke the read option available on the Dashboard Permissions panel. If you have write permission for a dashboard, you can grant and revoke the write option on the Dashboard Permissions panel.

  Note: If your user account does not have read permission for a dashboard, you cannot see the dashboard on the Library page.

Dashboard permissions are determined using a most permissive model. For more information, see How Dashboard Permissions Are Determined.

Dashboard permissions can also be managed using the API endpoints GET /api/dashboards/{dashboardId}/acls, PUT and PATCH /api/dashboards/{dashboardId}/acls/bulk, GET /api/inventory/DASHBOARD/{id}, and GET /api/user/permissions/dashboards/{dashboardId}.

API documentation is provided with your Symphony installation at this link: <symphony-URL>/discovery/swagger-ui.html.

• Users who have the group privilege Export Dashboards (ROLE_EXPORT_DASHBOARDS) and READ for dashboards can export dashboards.

• Users who have group privileges of Manage Connections (ROLE_MANAGE_CONNECTIONS), and Administer Sources (ROLE_ADMINISTER_SOURCES), and Administer Visuals (ROLE_ADMINISTER_VISUALS), and Administer Dashboards (ROLE_ADMINISTER_DASHBOARDS) can import dashboards.

For more information, see the following topics:

• Export Dashboards

• Import Dashboards

• Grant Permissions for a Data Discovery Dashboard

• Modify Permissions for a Dashboard

• Revoke Permissions for a Dashboard

• How Dashboard Permissions Are Determined