Hi ,
There is a user who has access to role "abc" and index "xyz"
Inside the role I made a panel in a dashboard which uses the same index. The person has access to the index, and he can search data individually .
He can load other panels in other dashboards which have the same index name in it .
But he is unable to load this particular panel in this particular dashboard.
Can you please help me figure out what is the issue ?
Regards
Check if the dashboard permission is shared and not private. Is the dashboard panel using any other knowledge objects like lookups, macro etc to which he doesn't have permission to read?
@Mohsin123, is there other "filters" in the panel search which is part of the "search restrictions" in the role , for e.g. a host or sourcetype
https://docs.splunk.com/Splexicon:Searchfilter