Policy Details for Console Dashboards
You can write policies to control access to the Console Dashboards service.
Resource-Types
dashboards
dashboard-groups
dashboards-family
Supported Variables
The Console Dashboards service supports all the general variables (see General Variables for All Requests).
Details for Verb + Resource-Type Combinations
The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect
> read
> use
> manage
. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.
Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
---|---|---|---|
inspect |
DASHBOARD_INSPECT |
none |
Also need |
read |
INSPECT + DASHBOARD_READ |
none |
INSPECT +
Also need |
use |
READ + DASHBOARD_UPDATE |
none |
READ +
Also need |
manage |
USE + DASHBOARD_CREATE DASHBOARD_DELETE |
none |
USE +
Also need |
Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
---|---|---|---|
inspect |
DASHBOARD_GROUP_INSPECT |
|
none |
read |
INSPECT + DASHBOARD_GROUP_READ |
INSPECT +
|
none |
use |
READ + DASHBOARD_GROUP_UPDATE |
READ +
|
none |
manage |
USE + DASHBOARD_GROUP_CREATE DASHBOARD_GROUP_DELETE |
USE +
|
none |
Permissions Required for Each API Operation
The following table lists the API operations in a logical order, grouped by resource type.
For information about permissions, see Permissions.
API Operation | Permissions Required to Use the Operation |
---|---|
ListDashboards
|
DASHBOARD_INSPECT and DASHBOARD_GROUP_READ |
GetDashboard
|
DASHBOARD_READ and DASHBOARD_GROUP_READ |
CreateDashboard
|
DASHBOARD_CREATE and DASHBOARD_GROUP_READ |
UpdateDashboard
|
DASHBOARD_UPDATE and DASHBOARD_GROUP_READ |
DeleteDashboard
|
DASHBOARD_DELETE and DASHBOARD_GROUP_READ |
ListDashboardGroups
|
DASHBOARD_GROUP_INSPECT |
GetDashboardGroup
|
DASHBOARD_GROUP_READ |
CreateDashboardGroup
|
DASHBOARD_GROUP_CREATE |
UpdateDashboardGroup
|
DASHBOARD_GROUP_UPDATE |
DeleteDashboardGroup
|
DASHBOARD_GROUP_DELETE |