in 10.17 there will be such a feature that you can select a global role for each dashboard that is required to see it.
So you have to wait until then I guess.
Currently the only workaround is that you create a new group, assign restricted devices/dashboards to it and work with inventory roles.