Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The permission structure is as follows:

RBAC for dashboards

When you (Dashboard Designer) create a dashboard, the following internal roles are automatically generated for the different role-based permission levels (i.e., viewer, editor, and owner) in the Analytics Dashboard and are assigned to you.

  • Internal/<DASHBOARD_ID>-viewer - Users who have this role can view the relevant dashboard. 
  • Internal/<DASHBOARD_ID>-editor - Users who have this role can edit and view the relevant dashboard.
  • Internal/<DASHBOARD_ID>-owner  - Users who have this role can edit, view and delete the relevant dashboard, and update the dashboard settings.

e.g., When a Dashboard Designer creates a dashboard with the ID my-dashboard, the following roles are automatically generated and assigned.

  • Internal/my-dashboard-viewer
  • Internal/my-dashboard-editor
  • Internal/my-dashboard-owner

Image Added

Initially, only you have the ability to view, edit, delete, or modify the settings of their own dashboard at startup. If another user needs to view, edit, delete, or modify the settings your dashboard, and if they do not have global level permissions, they need to be assigned the respective roles. A dashboard can have multiple owners. In addition, users with the Internal/<DASHBOARD_ID>-owner role can add different roles into different role-based permissions, using the dashboard settings page, and give access to users with different roles.

Info
iconfalse

The following are the ways in which you can assign specific access levels to users.

  • The users can be assigned to roles that are specifically created for the respective dashboard via the WSO2 DS Management Console.
  • The roles that correspond to different users can be assigned to each dashboard via the Analytics Dashboard settings page.