# How to set permission to read but not to create dashboards

**URL:** <https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212>\
**Category:** Graylog Central (peer support)\
**Created:** [April 30, 2020, 8:55pm UTC](https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212 "2020-04-30T20:55:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kirt](https://avatars.discourse-cdn.com/v4/letter/k/50afbb/32.png) [@Kirt](https://community.graylog.org/u/Kirt)\
**Post date:** [April 30, 2020, 8:55pm UTC](https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212/1 "2020-04-30T20:55:40Z")

</div>

Hi all,

I am trying to create a roll in Graylog 3.2.4, that can read but not create dashboards.

While the users in this roll cannot use the “save” button after they created or edited  
a dashboard, they can still use the “save as” button and create additional dashboards  
on this way.

I created a roll using the GUI and checked the settings by the REST API:

{  
“name”: “Read-Dashboards”,  
“description”: “”,  
“permissions”: [  
“dashboards:read:5eaad1e9d9ae5e24a94b0d96”,  
“streams:read:000000000000000000000003”,  
“streams:read:000000000000000000000002”,  
“streams:read:000000000000000000000001”,  
“dashboards:read:5ea6a1df3140600360412234”  
],  
“read\_only”: false  
}

Thanks for any hints.  
Kirt

---

<div class="post-metadata">

**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\
**Post date:** [May 5, 2020, 9:03am UTC](https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212/2 "2020-05-05T09:03:47Z")

</div>

Check all roles you assigned to user, because they are cummulative. If you assign higher level privileges role to user, this new role cannot works.

---

<div class="post-metadata">

**Author:** ![Kirt](https://avatars.discourse-cdn.com/v4/letter/k/50afbb/32.png) [@Kirt](https://community.graylog.org/u/Kirt)\
**Post date:** [May 5, 2020, 1:53pm UTC](https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212/3 "2020-05-05T13:53:01Z")

</div>

Thanks shoothub.

I tried two setups, but both will allow the user to create a new dashboard by using the “save as” button:

1. Role “reader” + role “read-Dashboards” (defined as above)
2. Role “reader” and individual permissions for the user to read streams and dashboards

What will be the correct way to let a user see (some) predefined dashboards without giving him the ability to create additional dashboards?

Thanks  
Kirt

---

<div class="post-metadata">

**Author:** ![Kirt](https://avatars.discourse-cdn.com/v4/letter/k/50afbb/32.png) [@Kirt](https://community.graylog.org/u/Kirt)\
**Post date:** [May 18, 2020, 2:17pm UTC](https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212/4 "2020-05-18T14:17:13Z")

</div>

Hi all,

did anybody successfully set up permissions/roles, as I try to?

I guess it is not uncommon to just allow read access to e.g. first level support without granting such users to create new dashboards.

Any hints are welcome!

Thanks  
Kirt

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 1, 2020, 2:17pm UTC](https://community.graylog.org/t/how-to-set-permission-to-read-but-not-to-create-dashboards/15212/5 "2020-06-01T14:17:14Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.