topic Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard? in Dashboards & Visualizations

If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

ankithreddy777 — Tue, 21 Mar 2017 15:52:26 GMT

If I add the Dashboard permissions to a particular Role mapped to LDAP group, can they see the indexes used in the creation of the Dashboard, even though I don't add index permissions to that Role?

Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

cmerriman — Tue, 21 Mar 2017 15:56:22 GMT

you could lock down the dashboard enough so they can't see how it was created. lock down the 'open in search' and 'inspect search' options to ensure they wouldn't see it. if they have search options, they'd be able to open that up in search and see the query, though it might not run if they don't have permission to view it.

Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

ankithreddy777 — Tue, 21 Mar 2017 16:08:53 GMT

Thank you, how to lock down the both options mentioned above in a Dashboard?.

Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

somesoni2 — Tue, 21 Mar 2017 16:25:36 GMT

Even though user may have permissions to dashboard, if they don't have access to the indexes being searched in the dashboard, they will not see any data. So, answer to your question is no, they can't see the indexes used in the creation (data) of the dashboard.

Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

ankithreddy777 — Tue, 21 Mar 2017 16:30:39 GMT

Somesoni,
They can't even see the data on the dashboard, if they don't have access to indexes.

Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

somesoni2 — Tue, 21 Mar 2017 16:37:11 GMT

If they don't have access to the index itself, the dashboard query will not return anything. (the base search itself would not give any data).
He/she will only be able to see data in panel which he/she can access.

Re: If I add dashboard permissions to a particular role mapped to an LDAP group, can they see the indexes used to create the dashboard?

adonio — Wed, 22 Mar 2017 01:20:50 GMT

Hi ankithreddy777,
like @somesoni2 mentioned in comments above, no access to data / index -> empty dashboard. splunk will not search against an index you have no authority to look at.