how to create roles with different capabilities??

[saifuddin9122]

Hello All

i have requirement where, i have to create 2 different groups with very limited capabilities.

a role with with users who can run searches and create dashboards.
other role with users who can view the available dashboards created by role-1 users and export the logs

here is what am doing

role-1
capabilities : search,schedule_search

role-2
export_results_is_visible

am i doing it in correct way? or do i need to disable or enable any other capabilities to achieve my goal.

Thanks for the Help

[sbbadri]

Authorize.conf

Role 1 -> role1_users and its capabilites
Role 2-> role1_users and its capabilites

Authentication.conf

if its users are in ad group:

role1_users = role1_users_ad_group
role2_users= role2_users_ad_group

if you are creating users as local users:

while creating users and select as appropriate