Limiting the visibility of OOTB dashboards in Splunk cloud

[Ben]

Hello,

I've created a simple app, let's call it IT_Users_App,  linked to a certain role called it_user. 

In the app, a user with the role above, can see hundreds of OOTB dashboards by default. 

I would like to hide those OOTB dashboards from the app / role, in a bulk action. Doing so one by one will not be fun 😞

Is there a way to accomplish that? 

Thanks in advance.

[gcusello]

Hi @Ben ,

you should change the grants in the apps containing the other dashboards.

Then, how do you created the new role? did you created by scratch or cloning another one or did you used an inheritance?

Don't use inheritance.

Ciao.

Giuseppe

[Ben]

Hi @gcusello 

I will look at the APP permissions.

About your question, I created the role from scratch. Thanks for the tip but why shouldn't I use Inheritance as a general guideline? 

Thanks for replying

Ben

[gcusello · Accepted solution]

Hi @Ben ,

because, using Inheritance, the new role inherits all permissions from the other one.

For example if you create a role inheriting from user, which accesses all non-internal indexes, the new role will have access to all non-internal indexes.

Ciao.

Giuseppe

[Ben]

Thanks again

[gcusello]

Hi @Ben ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉