We're rolling out LogRhythm for our SOC. Management wants to see dashboards but shouldn't have edit rights or access to raw data.
I need to give them view-only access to specific dashboards. I've checked the admin console and the roles/permissions aren't straightforward for this.
What's the exact step-by-step to create a role that only allows viewing a set of pre-built dashboards? Assume they have no other permissions. I'm on version 7.8.
I ran into this same issue last month with our auditors. The roles interface isn't intuitive.
You need to create a custom role under System > Users & Roles > Roles. Start with the pre-built "Viewer" role as a template, then strip out all permissions except "Dashboard - Read." Don't grant any entity, case, or log access. The tricky part is that after you create the role and assign users, you still have to go to each specific dashboard and use the "Share" option to explicitly grant that role access to it.
Does the "Share" permission step apply in 7.8, or is there a different method for dashboard-level assignment now?