Published at: 2026-09-17
Dashboard permissions
Dashboard Permissions
Overview
Dashboards give your enterprise a visual decision-making board. With layered permission control, admins make sure each role sees the dashboard content that matches its needs while keeping sensitive data secure. Enterprise-type dashboards also support sharing data across permission boundaries.
Permission System Structure
Dashboard permissions have two layers:
Backend operation permissions: Configured through roles, these determine a user’s ability to create and manage dashboards:
| Permission | Description |
|---|---|
| View | View dashboards |
| New | Create personal-type dashboards |
| Edit | Edit dashboards |
| Delete | Delete dashboards |
CRM admins and report admins can create enterprise-type dashboards.
Page visibility permissions: Set the visible scope when creating a dashboard:
- Public: Visible to everyone with view permission in the backend.
- Private: Visible to the Designated Personnel who have view permission in the backend.
Dashboard Type Comparison
| Dimension | Personal Type | Enterprise Type |
|---|---|---|
| Creator | Roles with create permission in the backend | Only CRM admins and report admins |
| Data permissions | Uses the viewer’s personal data permissions | Uses the grantor’s data permissions |
| Use case | Personal data analysis | Enterprise-level large-screen display. Solves cases where employees need data insight but have no data permission |
Before You Begin
[!IMPORTANT] - Role permissions: You need CRM admin permissions. - Scope of impact: Dashboard permission changes take effect immediately for all users in the role. - Completion Conditions: The target role and dashboards have been created.
Configure Role Dashboard Permissions
Dashboard operation permissions are controlled through role configuration.
- Go to Setup > Role Permission Management > Manage Functional Permissions.
- Select the target role.
- Find the dashboard permissions section.
- Select the permissions you need:
| Permission | Custom Dashboard | Preset Dashboard |
|---|---|---|
| View | ✅ | ✅ |
| New | ✅ | — |
| Edit | ✅ | ✅ |
| Delete | ✅ | ✅ |
- Click Save.
Preset Dashboard Backend Permission Configuration
Preset dashboard operation permissions are also controlled through roles:
- Go to Setup > Role Permission Management > Manage Functional Permissions.
- Select the target role.
- Find the preset dashboard area in the dashboard permissions section.
- Select the permissions you need: View, Edit, Delete.
- Click Save.
Manage Enterprise-Type Dashboard Authorization
An enterprise-type dashboard must be authorized by an admin before the target personnel can view it.
Authorization Steps
- Go to the Dashboard Management page.
- Find the target enterprise-type dashboard.
- Click Authorize.
- Select the applicable objects: roles, personnel, or departments.
- Save the authorization configuration.
Authorization Rules
- After authorization, the authorized personnel see the dashboard in their dashboard list.
- After the Revoke Authorization action, the dashboard is no longer visible to them.
- Employees within the Applicable Scope see admin-assigned dashboards by default. They also see dashboards they created themselves, dashboards shared by others, and preset dashboards added in version updates.
[!NOTE] The Dashboard Management entry is visible only to CRM admins and report admins.
Recommended Applicable Scope Assignments
Assign different dashboards to different personnel based on your org structure and role requirements:
| Role | Recommended Assignment |
|---|---|
| Enterprise executives | Company-wide operations dashboard, revenue analysis dashboard |
| Finance head | Financial indicators dashboard, cost analysis dashboard |
| Department/region head | Department performance dashboard |
| Regular sales rep | Personal performance dashboard |
[!WARNING] When an employee matches multiple assignment groups, the system applies the first matching group. Arrange the assignment order carefully.
Assignment Override Rule
After Administrator Assignment of dashboards, the assignment overrides any display or ordering adjustments the employee made earlier. The employee can still make further adjustments on top of the admin assignment (hide, reorder, and so on).
Dashboard Operation Permission Details
| Operation | Description |
|---|---|
| New | Roles with create permission in the backend can create personal-type dashboards. CRM admins and report admins can create enterprise-type dashboards |
| Edit | Users can edit dashboards they created. Users can edit dashboards shared with or authorized to them when Edit is checked. CRM admins and report admins can edit all dashboards |
| Delete | Users can delete dashboards they created. Users can delete dashboards shared with or authorized to them when Delete is checked. CRM admins and report admins can delete all dashboards |
| Share | Users can share personal-type dashboards they created with others for viewing. After sharing is canceled, the dashboard is no longer visible to others |
| Authorize | Only CRM admins and report admins can authorize enterprise-type dashboards to others for viewing. After the Revoke Authorization action, the dashboard is no longer visible |
| Hide | Users can hide any visible dashboard as needed. Effective only for themselves |
How to Verify
- Log in to CRM as a user with the target role.
- Open Dashboards and confirm the available operations match the configuration.
- If enterprise-type dashboard authorization is configured, log in as an authorized user and verify visibility.
Notes
- Personal-type dashboards use the viewer’s personal data permissions.
- Enterprise-type dashboards use the grantor’s data permissions. You can constrain the Data Range with global filters.
- After the dashboard Applicable Scope changes, logged-in users must refresh the page for the change to take effect.