Splunk Search

limit user access to dashboard only

gurinderbhatti
Path Finder

I need to provision new users for splunk access. Yet i dont want to have access to perform any searches , create reports/alerts, do any of that. Simply when they log in, they are presented with a dashboard we've created for them.
Is there a way to do this?
Thanks in advance.

the_wolverine
Champion

There isn't currently a good way to do this. You could preschedule the searches and remove all the clicks and give the user read access, however, its a lot of wasted resource to schedule searches that will only be consumed when the user needs to look at the dashboard.

There should be a special role which would allow an admin to map a group for access to only a dashboard (clicks only) with no capability to search manually. Perhaps this could be done with a "run-as" feature that could be configurable in the dashboard. The user cannot actually run the searches, but when loaded via the dashboard, those searches are "run-as" a user/role with the proper permissions to do so.

0 Karma

rwissSLNL
Engager

Maybe it is a option for you to make the reports embedded and create a webpage that included the reports?

You need to schedule the reports so, they will not see live data but if you schedule every 5 minutes if that is possible in you case than you have a solution. Not native Splunk but maybe it helps you.

0 Karma

pingpangbubai
Explorer

hi, I've tried your suggest, scrub the permission of dashboard_live and flashtimeline to the boardUser, but when the user of boardUser log in, there is also auto-search-bar blow, I want to screen only dashboard and restrict other users to see auto-search-bar, could you give me some suggestion? 3q!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...