Dashboards & Visualizations

How to Restrict the permissions to a Dashboard to only certain users in LDAP?

pavanae
Builder

I know there is a way to do that by creating a role and assigning that role to the Ldap Group, but I want to know is there any other way that I can assign directly to certain users that I prefer to instead of assigning that role to all the members in a dashboard.

Any suggestions will be helpful Thanks

0 Karma
1 Solution

masonmorales
Influencer

You could use embedded reports if you want to do it outside of Splunk. Or, you can create/use roles and assign specific roles read access to your dashboard, while denying access to other roles.

If your question really is: Do I need to create a new LDAP group and assign members to it, then map that LDAP group to a Splunk role, and finally configure my dashboard permissions to be role-specific, then the answer is yes. You can only configure permissions for knowledge objects at the role level, not at the user level.

View solution in original post

masonmorales
Influencer

You could use embedded reports if you want to do it outside of Splunk. Or, you can create/use roles and assign specific roles read access to your dashboard, while denying access to other roles.

If your question really is: Do I need to create a new LDAP group and assign members to it, then map that LDAP group to a Splunk role, and finally configure my dashboard permissions to be role-specific, then the answer is yes. You can only configure permissions for knowledge objects at the role level, not at the user level.

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...