Dashboards permissions - Configure Dashboard permissions by setting it to enabled/disabled. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Configure Dashboard permissions by setting it to enabled/disabled.

This is a master permission. To view any specific dashboard (e.g., Command Center), this primary permission must first be set to Enabled.

  • Functionality: When enabled, users can manage the Dashboard Manager, use the widget library, and view accessible dashboards.

  • Scope-Based Access Control (SBAC): Access to a dashboard does not grant access to the underlying data. If a user lacks the necessary SBAC data scope, widgets may appear empty or show errors

  • Privacy: New dashboards are private by default. Administrators can configure sharing permissions under SettingsConfigurationsAccess ManagementObjects.

  • Predefined system dashboards and Marketplace dashboards cannot be deleted or have their privacy changed.

For more information on dashboards, see About dashboards.

Permissions

Description

Roles Example

Enabled

Users can manage dashboards in the Dashboard Manager, manage the widget library, view all dashboards they have access to, and perform actions based on the following additional permissions:

  • Create Dashboards: Enables users to create custom dashboards. The creator becomes the owner with full control to edit, delete, and manage sharing for that dashboard.

  • Edit Public Dashboards: Enables users to modify custom dashboards that an owner has made public. By default, only the owner can edit a public dashboard.

    Note

    By default, all new dashboards are restricted (private) and visible only to the creator (the owner). An administrator (or role with equivalent access) can configure how dashboards are shared across the tenant under SettingsConfigurationsAccess ManagementObjects. These settings control whether dashboard owners are allowed to share their restricted dashboards directly with other users. For more information, see Manage access to objects.

Most roles should have Dashboards enabled and for users to create and edit dashboards.

Disabled

Users cannot access the Dashboard Manager or view any dashboards.