topic Re: limit user access to dashboard only in Splunk Search

limit user access to dashboard only

gurinderbhatti — Wed, 12 Feb 2014 18:15:16 GMT

I need to provision new users for splunk access. Yet i dont want to have access to perform any searches , create reports/alerts, do any of that. Simply when they log in, they are presented with a dashboard we've created for them.
Is there a way to do this?
Thanks in advance.

Re: limit user access to dashboard only

somesoni2 — Wed, 12 Feb 2014 19:44:31 GMT

See this
http://answers.splunk.com/answers/102913/controlling-access-to-dashboard-and-search-capability

Re: limit user access to dashboard only

pingpangbubai — Mon, 09 Feb 2015 05:18:26 GMT

hi, I've tried your suggest, scrub the permission of dashboard_live and flashtimeline to the boardUser, but when the user of boardUser log in, there is also auto-search-bar blow, I want to screen only dashboard and restrict other users to see auto-search-bar, could you give me some suggestion? 3q!

Re: limit user access to dashboard only

rwissSLNL — Mon, 09 Feb 2015 10:31:32 GMT

Maybe it is a option for you to make the reports embedded and create a webpage that included the reports?

You need to schedule the reports so, they will not see live data but if you schedule every 5 minutes if that is possible in you case than you have a solution. Not native Splunk but maybe it helps you.

Re: limit user access to dashboard only

the_wolverine — Wed, 15 Jul 2015 22:14:06 GMT

There isn't currently a good way to do this. You could preschedule the searches and remove all the clicks and give the user read access, however, its a lot of wasted resource to schedule searches that will only be consumed when the user needs to look at the dashboard.

There should be a special role which would allow an admin to map a group for access to only a dashboard (clicks only) with no capability to search manually. Perhaps this could be done with a "run-as" feature that could be configurable in the dashboard. The user cannot actually run the searches, but when loaded via the dashboard, those searches are "run-as" a user/role with the proper permissions to do so.