How to give users read-only access to a dashboard that has dynamic drop-downs with higher permissions?

[bruceclarke]

Hi all,

I'm trying to an app that has several dynamic dashboards. I want to give users read-only access to these dashboard. The problem I'm running into is that the dashboard is running with higher permissions than I want to give the user. In particular, I have dropdowns on each dashboard that use DBConnect to poll which options a user have access to.

Is there a way that I can give a user read-only access to a dashboard while still giving the dynamic dropdowns the permissions they need?

Hopefully this makes sense, but I'm happy to provide more details if need be. Thanks!

[bruceclarke · Accepted solution]

I've decided the best way to do this is to revoke their access to Splunk's search app and give them read-only access to other appropriate apps. This means they can't edit the dashboard and they only get to interact with the dropdowns on the front end.

[jcoates_splunk]

Can you index the data so that the user is accessing an index instead of the raw command?

[bruceclarke]

Unfortunately no. The query I want to run is below:

| rest /services/authentication/current-context/context
| eval user_Name=username
| map search="dbquery myDB limit=1000 \"SELECT email, databaseName, serverName FROM userAccessTable WHERE email LIKE '$username$@%'\""

So, basically, get the list of databases/servers that a user has access to.