...
When a user ( a dashboard designer) creates a dashboard in the Analytics Dashboard it is initially only visible to him/her. The Dashboard Designer can provide access to certain users, who belong to the same tenant, to work with that respective dashboard. Furthermore, the Dashboard Designer is able to modify the list of user roles that can work with the dashboard. A dashboard can have multiple roles that have full permission.
Global-level permissions
You can use the global-level permission model to set permissions for the following use cases of WSO2 DAS:
...
The permission structure is as follows:
RBAC for dashboards
When you (Dashboard Designer) create a dashboard, the following internal roles are automatically generated for the different role-based permission levels (i.e., viewer, editor, and owner) in the Analytics Dashboard and are assigned to you.
Internal/<DASHBOARD_ID>-viewer -
Users who have this role can view the relevant dashboard.Internal/<DASHBOARD_ID>-editor -
Users who have this role can edit and view the relevant dashboard.Internal/<DASHBOARD_ID>-owner -
Users who have this role can edit, view and delete the relevant dashboard, and update the dashboard settings.
e.g., When a Dashboard Designer creates a dashboard with the ID my-dashboard
, the following roles are automatically generated and assigned.
Internal/my-dashboard-viewer
Internal/my-dashboard-editor
Internal/my-dashboard-owner
Initially, only you have the ability to view, edit, delete, or modify the settings of their own dashboard at startup. If another user needs to view, edit, delete, or modify the settings your dashboard, and if they do not have global level permissions, they need to be assigned the respective roles. A dashboard can have multiple owners. In addition, users with the Internal/<DASHBOARD_ID>-owner
role can add different roles into different role-based permissions, using the dashboard settings page, and give access to users with different roles.
Info | ||
---|---|---|
| ||
The following are the ways in which you can assign specific access levels to users.
|