2

i have a few charts and data grids in the azure shared dashboard, for various audiences, e.g. exec, operations,sres. Would like to share the access to read the dashboard to them, but not the underlying resources, e.g. my app services, log analytics workspace etc., would this viable?

Tommy Wang
  • 99
  • 6

1 Answers1

0

Yes. It is viable.

With Azure role-based access control (Azure RBAC), you can assign users to roles at three different levels of scope:

  • subscription
  • resource group
  • resource

When you select the specific resource (your dashboard in this case) as the scope, the users who are assigned RBAC role will only have access to this resource, not any other resources. Reference here.

Please refer to this link to assign access to a dashboard. Note that if you don't want others to edit your dashboard, you just need to assign Reader RBAC role rather than Contributor.

Allen Wu
  • 15,529
  • 1
  • 9
  • 20
  • not working, i grant the user the 'reader' access role, the dashboard show up but it says 'access permission denied' for the particular chart, i dont want to grant them access to individual resources.. this is a killer – Tommy Wang Mar 23 '21 at 17:56