# Non-Admin user is unable to edit dashboards

**URL:** <https://community.graylog.org/t/non-admin-user-is-unable-to-edit-dashboards/2322>\
**Category:** Graylog Central (peer support)\
**Created:** [September 1, 2017, 12:15am UTC](https://community.graylog.org/t/non-admin-user-is-unable-to-edit-dashboards/2322 "2017-09-01T00:15:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![TJgrayD](https://avatars.discourse-cdn.com/v4/letter/t/85f322/32.png) [@TJgrayD](https://community.graylog.org/u/TJgrayD)\
**Post date:** [September 1, 2017, 12:15am UTC](https://community.graylog.org/t/non-admin-user-is-unable-to-edit-dashboards/2322/1 "2017-09-01T00:15:31Z")

</div>

Graylog 2.3.0  
ES 5.5.1

I manually created a “Power user” role, with the goal of: Enabling search tab for non-admin users on all streams, allowing users to view as many system properties as possible, and to edit all saved searches, dashboards, and decorators.

This works great so far, except for editing dashboards. I can create dashboards. I can read all the dashboards available on the system, but I can’t edit any of them - including the ones I create. Am I doing something wrong, or is this a bug?

My testuser is assigned the “Reader” role, and the “xp\_powerusers” Role.  
Here is the output from /api/roles/xp\_powerusers

```auto
{
  "name": "xp_powerusers",
  "description": "Activates Search menu, allows read access to all streams, allows users to create and modify dashboards, searches, and decorators",
  "permissions": [
    "searches:keyword",
    "messagecount:read",
    "users:read",
    "journal:read",
    "searches:absolute",
    "metrics:read",
    "savedsearches:edit",
    "bundle:read",
    "systemjobs:read",
    "sources:read",
    "ssoauthconfig:read",
    "metrics:readall",
    "metrics:allkeys",
    "notifications:read",
    "outputs:read",
    "decorators:read",
    "savedsearches:read",
    "metrics:readhistory",
    "messages:read",
    "dashboards:read",
    "streams:read",
    "decorators:create",
    "pipeline_connection:read",
    "collectors:read",
    "lookuptables:read",
    "messages:analyze",
    "inputs:read",
    "roles:read",
    "deflector:read",
    "dashboards:edit",
    "indices:failures",
    "dashboards:create",
    "decorators:edit",
    "fieldnames:read",
    "pipeline:read",
    "buffers:read",
    "indexranges:read",
    "system:read",
    "savedsearches:create",
    "searches:relative",
    "stream_outputs:read",
    "pipelinerule:read",
    "indices:read",
    "jvmstats:read",
    "loggers:read",
    "throughput:read"
  ],
  "read_only": false
}

```

BTW, I just want to say how awesome the API browser is. It really makes it easy to dig through the API. Thanks.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [September 1, 2017, 7:05am UTC](https://community.graylog.org/t/non-admin-user-is-unable-to-edit-dashboards/2322/2 "2017-09-01T07:05:26Z")

</div>

Some permissions (such as the dashboard permissions) also have to include the ID of the dashboards allowed to read/edit or a wildcard (`*`).

Try using `dashboards:read:*` and `dashboards:edit:*`.

---

<div class="post-metadata">

**Author:** ![TJgrayD](https://avatars.discourse-cdn.com/v4/letter/t/85f322/32.png) [@TJgrayD](https://community.graylog.org/u/TJgrayD)\
**Post date:** [September 1, 2017, 6:53pm UTC](https://community.graylog.org/t/non-admin-user-is-unable-to-edit-dashboards/2322/3 "2017-09-01T18:53:35Z")

</div>

That did it! Thank you.

While we’re on the topic, I have some related questions

- Is there a list of permissions which accept and/or require wildcards/specific ID’s?
- Can I use wildcards like: savedsearches:\* - with the intention of allowing all available permissions (read,edit,create).
- Can I use wildcards like: dashboards:_:_ to allow all permissions on all dashboards?

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 15, 2017, 6:54pm UTC](https://community.graylog.org/t/non-admin-user-is-unable-to-edit-dashboards/2322/4 "2017-09-15T18:54:07Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.