Articles in this section

How to Set User and Group Level Dashboard Feature Permissions in Bold BI Server

Published:

Dashboard feature permissions allow administrators to control granular actions at the dashboard level, including exporting dashboard content, viewing underlying data records, and modifying dashboard parameters. These permissions are applied per dashboard (resource scope) and can be assigned to individual users or groups for better governance and compliance.

Note: These controls are per-dashboard and do not replace backend security such as data-source-level filtering, row-level security, or query-level constraints.


Understanding Permission Structure

Permissions follow this structure: Entity – Scope – Access Mode

Component Description
Entity Defines what the permission applies to (e.g., All Dashboards, Specific Dashboard)
Scope Narrows the entity to specific categories or dashboards (if applicable)
Access Mode The action allowed: Export, View Underlying Data, Dashboard Parameters

Available Entities

Entity Description
All Dashboards Applies permissions to all dashboards site-wide
Dashboards in Category Applies permissions to all dashboards within specific category(ies)
Specific Dashboard Applies permissions to one or more individual dashboards

Available Feature Actions (Access Modes)

Permission Description
Export Allows users to export dashboard as Image, PDF, PPT, Excel, or CSV
View Underlying Data Allows users to view raw records behind dashboard widgets
Dashboard Parameters Allows users to access and modify dashboard parameter values

Step-by-Step Instructions

For User-Level Permissions

  1. Navigate to Manage Permissions - Users

    Sign in to Bold BI Server as an Administrator. Go to Settings and select Users from the Site settings menu.

    image.png

  2. Select User to Add Permission

    In the User management page, locate the target user and click the kebab button and select Manage Permissions button to begin configuring permissions.

    image.png

  3. Select Resource Feature Permission

    In the Manage Permissions page, choose Resource Feature Permission and click on Add Permission.

    image.png

    image.png

  4. Configure Entity and Scope

    In the Add Permission dialog:

    • Select the Entity (All Dashboards, Dashboards in Category, or Specific Dashboard)
    • If applicable, choose the Scope (specific category or dashboard)

    image.png

  5. Enable Feature Actions
    Shift to Resource Feature Permission
    Under Access Mode, enable the feature actions as needed:

    • Export – Enable/disable export functionality
    • View Underlying Data – Control access to raw data behind widgets
    • Dashboard Parameters – Control ability to modify dashboard parameters
      Click Add to save the permission.

image.png

image.png

For Group-Level Permissions

  1. Navigate to Manage Permissions - Groups

    Go to Settings → Groups (or Manage Permissions → Groups).

  2. Click Add Permission for the target group.

  3. Select Resource Feature Permission and configure Entity, Scope, and Access Mode as described above.


Permission Precedence and Conflict Resolution

Understanding how Bold BI resolves permission conflicts:

Scope Priority (Highest to Lowest)

  1. Specific Dashboard
  2. Dashboards in Category
  3. All Dashboards

The system stops at the first scope where a matching permission is found.

Principal Priority (Same Scope)

  • User permissions always override Group permissions at the same scope level

Conflict Resolution Rules

  • A deny value overrides an allow value
  • Allow is applied only when all values are allowed
  • If a user belongs to multiple groups, and any group assigns deny, the final permission is deny

Notes and Limitations

  • Feature permissions are applied per dashboard (resource scope)
  • Assigning permissions at the group level is recommended for large teams for easier maintenance
  • Feature permissions provide UI-level governance only
  • These permissions do not replace backend security measures such as:
    • Data-source-level filtering
    • Row-level security (RLS)
    • Query-level constraints

Related Articles

Was this article useful?
Like
Dislike
Help us improve this page
Please provide feedback or comments
EO
Written by Erick Oloo Awino
Updated:
Comments (0)
Access denied
Access denied