This question seems simple but I'm having trouble actually implementing it. I'm also having trouble finding a thread that already addresses this problem in full — feel free to link me to an existing thread if it's applicable here.
Issue Explained:
I'm a power user with access to all indexes (infosec), and I'm trying to create a dashboard under a newly created App called Service Desk. I plan to grant Service Desk employees access, but they will be confined to this app (and likely start on a homepage of this dashboard).
It is essentially an AD lockout dashboard with multiple panels. These panels and their underlying searches have access to multiple indexes (such as windows event logs, AD logs, WIFI logs, FW logs, etc).
I want these employees to be able to run searches on the dashboard through the use of tokens (such as the input of a username), but really, by limiting everything else. And, I definitely don't want them to have access to searching the underlying indexes.
I have the finished dashboard with all panels created already in another App. No matter what I try, it seems to get more and more complicated to move it to the Service Desk app, and I keep having permission issues.
I've tried copying the source code over to a new dashboard in the Service Desk App — some panels work, and some don't. Most permission errors say that these panels can’t access the included lookup tables because they don’t exist or aren’t available. I’ve tried granting everyone access to the lookups, and I’ve tried moving the lookups to the Service Desk app, but the issue persists.
I’ve also tried creating reports (or saved searches) for each of the searches / panels in the Service Desk App. Then I add those to the dashboard to be run with the owner's (my) permissions. Even though this was what I believed to be the recommended route, it doesn’t seem to work when trying to pass tokens from the inputs to the saved searches, and other forums have indicated this as well.
I can’t find a support article that pieces all of this together with a solution — any help would be appreciated.
... View more