Dashboard access control
With dashboard access control, individual permissions determine a user’s abilities. This article describes the individual permissions and how to configure dashboard access control.
Dashboard permissions
There are four permission levels for a dashboard: No Permissions, Can Run, Can Edit, and Can Manage. Only the dashboard owner has Can Manage permission; this permission cannot be shared.
The table lists the abilities for each permission.
Ability |
No Permissions |
Can View |
Can Run |
Can Edit |
Can Manage |
---|---|---|---|---|---|
See in dashboard list |
x |
x |
x |
x |
|
View dashboard and results |
x |
x |
x |
x |
|
Refresh query results in the dashboard (or choose different parameters) |
x |
x |
x |
||
Edit dashboard |
x (1) |
x |
|||
Modify permissions |
x |
||||
Delete dashboard |
x |
(1) Requires the Run as viewer sharing setting.
Note
The principal used to execute a query is the user that created the query, not the user that clicks the Refresh button.
Sharing settings
Dashboards support two types of sharing settings: Run as viewer and Run as owner.
To configure sharing settings:
Click
Dashboards in the sidebar.
Click a dashboard.
Click the
button at the top right. The Manage Permissions dialog appears.
In the Sharing settings > Credentials field at the bottom, select:
Run as viewer: the viewer’s credential is used to execute the queries in the dashboard.
Run as owner: the owner’s credential is used to execute the queries in the dashboard.
Once you accept Run as viewer, you can no longer change the credential back to Run as owner. If you revoke all sharing, you will be able to set Credentials.
Manage dashboard permissions using the UI
Click
Dashboards in the sidebar.
Click a dashboard.
Click the
button at the top right. The Manage Permissions dialog appears.
Follow the steps based on the permission type you want to grant:
Can Edit permission
Select the Run as viewer sharing setting.
Click the top field to add a user or group.
Select the Can Editpermission.
Click Add.
Can Run permission
Click the top field to add a user or group.
Select the Can Runpermission.
Click Add.
Dismiss the dialog.