What permissions are required to allow users to set permissions on dashboards they have created.

Applicability

Description

When the main goal is for users to be able to create their own dashboards and then share them with other users.

Resolution

You can grant access to a dashboard from the Dashboard Editor. However, your user role and capabilities defined for that role might limit the type of access you can define.

If the Splunk user role is admin (with the default set of capabilities), then it can create dashboards that are private, visible in a specific app, or visible in all apps. It can also provide access to other Splunk user roles, such as user, admin, and other roles with specific capabilities.
Usually, creating a custom role (containing whichever users you want to be included) and then assign read/write permissions for the new role against the relevant app via the App Manager. This would restrict which apps a user can access, view, and modify (objects) within the app context.

With typical user capabilities (such as the 'user' role) all Dashboards created by them are private, though users will be able to access their own dashboards so long as they retain read permissions on the appropriate app context.

For example 'user1' initially has read permissions for 'app2' and creates a bunch of dashboards. These will be private and can't be shared with other users without increasing the capabilities of their role. If 'user1' access is subsequently removed from 'apps2' they will no longer see the app or any dashboards they have created within that app context.

If a user has write permissions on a given app they can choose to keep their Dashboards private or share it within the app context - the latter would allow any role with reading permissions for that app to view them.

1) Users with write permissions within the app can choose to share dashboard objects within the app, users with read permissions on the same app will be able to view dashboards shared in this way
2) By default dashboards are private and only accessible by that user
3) Removing a role's read permissions will hide any dashboards created by associated users within that app context
 

Related Links

Splunk Documentation

About dashboards

Configure dashboards

Options for dashboards

Capabilities