user access management in Superset

[iSUPPLY-BI]

Hello, I need some help with user access management in Superset.

I am trying to grant access to a specific user for particular dashboards and charts. However, when I provide access, the user ends up being able to see all dashboards and charts. When I remove the all_datasource_access permission, the user is unable to read the data.

The issue is that a dataset may contain multiple charts, and some of these charts are placed in different dashboards. I want the user to have access to specific charts across various dashboards without granting access to everything.

Can anyone provide guidance on how to configure this properly?

VERSION: apache-superset==5.0.0rc1

[dosubot[bot]]

Hey @iSUPPLY-BI! I'm here to assist you with any bugs, questions, or contributions you need help with. Let's work together to solve the issue you're facing.

I found a similar closed issue titled "Ability to Restrict Access to Different Charts under the Same Datasource" which might be relevant to your situation. Unfortunately, this issue does not have comments or a provided solution ^[1].

To address your problem, you can create custom roles in Superset that allow access to specific charts without granting all_datasource_access. Here's how you can do it:

1. Assign the Gamma role to users who need limited access.
2. Create a new role via the Superset UI (Menu -> Security -> List Roles) and click the + sign.
3. In the new role creation window, give the role a name, assign it to users, and select specific tables in the Permissions dropdown. Use the typeahead to search for your table names.
4. Confirm that users with the Gamma role can see the objects (dashboards and slices) associated with the tables you have extended access to ^[2].

This approach allows you to manage data source access for Gamma roles by creating roles that provide access to specific datasets without needing to grant all_datasource_access.

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}

[iSUPPLY-BI]

what if i have a dataset with 2 charts for each chart in the dashboard so, for example, I have userA and ChartA and ChartB, DashboardA , DashboardB, I need to grant the user to see just DashboardA which contains ChartA

[dosubot[bot]]

To grant userA access to only DashboardA, which contains ChartA, without giving access to DashboardB or ChartB, you can follow these steps:

1. Assign the Gamma Role: Ensure userA has the Gamma role, which allows viewing of dashboards and charts they have permissions for.

2. Create a Custom Role: Navigate to Menu -> Security -> List Roles and create a new role. Name it appropriately, such as "DashboardA_Access".

3. Assign Specific Permissions: In the new role, use the Permissions dropdown to select only the data sources (tables) that ChartA uses. This ensures userA can access the data needed for ChartA.

4. Assign Role to User: Assign this new role to userA. This will allow userA to view DashboardA and ChartA without accessing DashboardB or ChartB.

By setting up roles this way, you can control access to specific dashboards and their associated charts without granting broader access to all charts within a dataset ^[1].

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}

[iSUPPLY-BI]

I do this but the user just accesses both charts
while two charts read from the same dataset