How to Set User and Group Level Dashboard Feature Permissions in Bold BI Server
Dashboard feature permissions allow administrators to control granular actions at the dashboard level, including exporting dashboard content, viewing underlying data records, and modifying dashboard parameters. These permissions are applied per dashboard (resource scope) and can be assigned to individual users or groups for better governance and compliance.
Note: These controls are per-dashboard and do not replace backend security such as data-source-level filtering, row-level security, or query-level constraints.
Understanding Permission Structure
Permissions follow this structure: Entity – Scope – Access Mode
| Component | Description |
|---|---|
| Entity | Defines what the permission applies to (e.g., All Dashboards, Specific Dashboard) |
| Scope | Narrows the entity to specific categories or dashboards (if applicable) |
| Access Mode | The action allowed: Export, View Underlying Data, Dashboard Parameters |
Available Entities
| Entity | Description |
|---|---|
| All Dashboards | Applies permissions to all dashboards site-wide |
| Dashboards in Category | Applies permissions to all dashboards within specific category(ies) |
| Specific Dashboard | Applies permissions to one or more individual dashboards |
Available Feature Actions (Access Modes)
| Permission | Description |
|---|---|
| Export | Allows users to export dashboard as Image, PDF, PPT, Excel, or CSV |
| View Underlying Data | Allows users to view raw records behind dashboard widgets |
| Dashboard Parameters | Allows users to access and modify dashboard parameter values |
Step-by-Step Instructions
For User-Level Permissions
-
Navigate to Manage Permissions - Users
Sign in to Bold BI Server as an Administrator. Go to Settings and select Users from the Site settings menu.
-
Select User to Add Permission
In the User management page, locate the target user and click the kebab button and select Manage Permissions button to begin configuring permissions.
-
Select Resource Feature Permission
In the Manage Permissions page, choose Resource Feature Permission and click on Add Permission.
-
Configure Entity and Scope
In the Add Permission dialog:
- Select the Entity (All Dashboards, Dashboards in Category, or Specific Dashboard)
- If applicable, choose the Scope (specific category or dashboard)
-
Enable Feature Actions
Shift to Resource Feature Permission
Under Access Mode, enable the feature actions as needed:- Export – Enable/disable export functionality
- View Underlying Data – Control access to raw data behind widgets
- Dashboard Parameters – Control ability to modify dashboard parameters
Click Add to save the permission.
For Group-Level Permissions
-
Navigate to Manage Permissions - Groups
Go to Settings → Groups (or Manage Permissions → Groups).
-
Click Add Permission for the target group.
-
Select Resource Feature Permission and configure Entity, Scope, and Access Mode as described above.
Permission Precedence and Conflict Resolution
Understanding how Bold BI resolves permission conflicts:
Scope Priority (Highest to Lowest)
- Specific Dashboard
- Dashboards in Category
- All Dashboards
The system stops at the first scope where a matching permission is found.
Principal Priority (Same Scope)
- User permissions always override Group permissions at the same scope level
Conflict Resolution Rules
- A deny value overrides an allow value
- Allow is applied only when all values are allowed
- If a user belongs to multiple groups, and any group assigns deny, the final permission is deny
Notes and Limitations
- Feature permissions are applied per dashboard (resource scope)
- Assigning permissions at the group level is recommended for large teams for easier maintenance
- Feature permissions provide UI-level governance only
- These permissions do not replace backend security measures such as:
- Data-source-level filtering
- Row-level security (RLS)
- Query-level constraints