You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, in Apache Superset 6.1.0, when an administrator grants access to a Dashboard to a specific user, user group, or role (e.g., adding them as a Viewer), those users often still cannot view the charts on the dashboard. They encounter permission errors because they lack access to the underlying Datasets used by those charts.
To fix this, admins must manually navigate to Security settings, identify all datasets powering every chart on that dashboard, and configure complex permissions/roles individually. This manual multi-step process is tedious, error-prone, and creates a high operational burden for dashboard management.
Desired Behavior / Proposed Solution
Superset should automatically and seamlessly handle underlying dataset access when dashboard viewer permissions are updated:
Automated Permission Cascading:
When a User, User Group, or Role is assigned as a Viewer on a Dashboard, the system should automatically grant implicit read access (or assign the necessary dataset permissions) to all datasets referenced by the charts on that dashboard.
If a new chart (with a new dataset) is added to the dashboard later, existing dashboard viewers should automatically inherit read access to the new dataset.
Smart Cleanup on Revocation:
If a viewer role/user is removed from a Dashboard, the system should automatically evaluate and clean up redundant dataset permissions (unless the user still needs access via another shared dashboard or explicit role assignment).
Admin Transparency & Control (Optional Toggle):
Provide an admin workspace setting: AUTO_GRANT_DASHBOARD_DATASET_ACCESS = True (enabled by default or per-dashboard setting).
Display a brief confirmation/toast when saving dashboard permissions: "Viewer access updated. Dataset permissions have been automatically configured."
Benefits
Eliminate Admin Friction: Reduces a tedious, multi-step configuration process to a single action.
Fewer "Access Denied" Support Tickets: Ensures that users granted access to a dashboard can actually view all charts out-of-the-box.
Improved UX & Scalability: Aligns Superset with modern BI platform standards (like Tableau or Power BI) where sharing a dashboard grants view permissions to its component data seamlessly.
Environment
Superset version: 6.1.0
Feature: Dashboard Permissions / Dataset Access Control (RBAC)
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Description
Currently, in Apache Superset 6.1.0, when an administrator grants access to a Dashboard to a specific user, user group, or role (e.g., adding them as a Viewer), those users often still cannot view the charts on the dashboard. They encounter permission errors because they lack access to the underlying Datasets used by those charts.
To fix this, admins must manually navigate to Security settings, identify all datasets powering every chart on that dashboard, and configure complex permissions/roles individually. This manual multi-step process is tedious, error-prone, and creates a high operational burden for dashboard management.
Desired Behavior / Proposed Solution
Superset should automatically and seamlessly handle underlying dataset access when dashboard viewer permissions are updated:
AUTO_GRANT_DASHBOARD_DATASET_ACCESS = True(enabled by default or per-dashboard setting).Benefits
Environment
All reactions