i have a few charts and data grids in the azure shared dashboard, for various audiences, e.g. exec, operations,sres. Would like to share the access to read the dashboard to them, but not the underlying resources, e.g. my app services, log analytics workspace etc., would this viable?
1 Answers
Yes. It is viable.
With Azure role-based access control (Azure RBAC), you can assign users to roles at three different levels of scope:
- subscription
- resource group
- resource
When you select the specific resource (your dashboard in this case) as the scope, the users who are assigned RBAC role will only have access to this resource, not any other resources. Reference here.
Please refer to this link to assign access to a dashboard. Note that if you don't want others to edit your dashboard, you just need to assign Reader RBAC role rather than Contributor.
Related