Configure dashboard permissions
Learn how to manage dashboard and panel search permissions.
Managing dashboard permissions
A dashboard is a knowledge object. The roles that you hold as a Splunk platform user govern your ability to configure dashboard permissions for yourself and others.
The following table shows the permissions management functions that the default roles in a new Splunk Platform implementation grant.
Default Splunk Role | Permission Management Abilities |
---|---|
User | Create new dashboards that are private to you. |
Power, Admin | Create new dashboards that are private to you. Share private dashboards with users of an app, or users of all apps. |
Your implementation might have a different set of roles for its users. Or it could have the default roles but the permission management abilities might be moved around between them. If you want more information about the permission management capabilities of your role, talk to your Splunk administrator. For more information about role-based knowledge object permissions management, see Manage knowledge object permissions in the Knowledge Manager Manual.
Managing panel search permissions
The search that drives a dashboard panel is a separate knowledge object from the dashboard. The search has its own configurable permissions. Inline, or ad hoc searches, rather than saved searches, are not knowledge objects, so you don't need permission to view visualizations that ad hoc searches drive. To limit access to ad hoc searches, as an admin, you must restrict access to one of the knowledge objects that the ad hoc search depends on, such as an index or a source.
Panel search permissions
A saved panel search can run using the permissions of the person who created the saved search (the search owner) or the person who views the dashboard (the search user). The search user context can affect results and what different users see in a dashboard panel. For example, if you have permissions to an index that others do not, you might want to run the saved search as the owner so that any other user will see the same results.
Depending on the results data access that you want to provide, you can adjust the permissions context for the search in the Reports listing page. Locate the search on this page and select Edit > Edit Permissions to change whether the search runs with the owner or user context. For more details about the permissions for saved searches and reports, see Set report permissions.
Also, consider the enabled permissions for other knowledge objects in a dashboard, such as Field Extractions and Event Types. For additional information on setting up permissions for other knowledge objects see Manage knowledge object permissions in the Knowledge Manager manual.
Specify permissions for a new dashboard
When you create a new dashboard from the Search or Dashboard pages, you can configure permissions. Choose one of the following options.
Option | Description |
---|---|
Private | Only you have permission to view and edit the dashboard. The dashboard is not visible to other users. |
Shared in app | The dashboard is available to other users in the app context where it was created. For example, if you create the dashboard in the Search and Reporting app, the dashboard is visible to other users in this context. Depending on their permissions, other users can edit the dashboard. |
Update dashboard permissions
After creating a dashboard you can change the permissions:
- Navigate to the Dashboards page in Search and Reporting.
- Locate the dashboard whose permissions you are updating.
- Under Actions, select Edit > Edit Permissions
- Depending on your role and capabilities, specify the following details.
- Choose Owner to make the dashboard private.
- Select App to share the dashboard in the current app context or share the dashboard in All apps on the Splunk platform instance.
- Grant read and write permissions
- Configure read (viewing) and writing (editing) privileges for other system users and/or roles.
Chart controls | Manage dashboards that need jQuery updates |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209, 9.0.2303, 9.0.2305, 9.1.2308, 9.1.2312, 9.2.2403, 9.2.2406 (latest FedRAMP release), 9.3.2408
Feedback submitted, thanks!