Is your question related to the free trial, or to a production (customer) instance?
We have an instance due to our partnership with Software AG
I don’t know if it is considered production or free trial.
What are you trying to achieve? Please describe it in detail.
We are trying to export a dashboard with public access, ie. provide a URL that provides read-only
access to a pre-defined dashboard. Have not found any How-to document.
Do you get any error messages? Please provide a full error message screenshot and log file.
We are ok with requiring a login.
If we define a “publicdemo” user, and allow Cockpit User role, the user has read-write access to all dashboards.
Do we need to define a new role? How do we limit the dashboard?
Have you installed all the latest fixes for the products and systems you are using?
Has publicdemo only got the cockpituser role? In my tenant, a user with that role gets 'Access denied when he tries to unlock a dashboard by clicking the padlock.
The user logging for demo purpose must not be the user who created the dashboard. Otherwise he is recognized as “owner” with full read & write access.
Global Roles are additive. So if a user has the cockpit user role and any other global role that contains “Inventory ADMIN” privileges the user can access & change the cockpit and all managed objects (Dashboards, Groups, Devices etc.). So review your roles. Most likely you need the cockpit user role and some inventory roles to specific groups of devices only.
Also note, that by default a new user will also have the roles: ROLE_USER_MANAGEMENT_OWN_READ and ROLE_USER_MANAGEMENT_OWN_ADMIN assigned directly to it even if you remove all of the Global Roles… These roles allow e.g. the user to change their passwords. In case of such a demo user, you would then want to remove the ROLE_USER_MANAGEMENT_OWN_ADMIN role to not allow them to change the password of that user.
unchecked it still allows to change the password. We will go ahead
even with this, and will just have to check periodically that the
account is still accessible. If you want to try
