How to make one dashboard for multiple tenants - each can see only own data

[lindstrom79]

Hi,
We are running a multi-tenancy tool and each client has it sown DB. We want to provide for each client a dashboard in Superset, but I want to avoid 1-n boards. I would like to have 1 board where n client have access to (based on user and role), but each client can only see his own data. We had a hack for this made in SQL Lab, but I wonder whether there an official way to do this since I can´t be the only one who faced this issue. Thank you!

[dosubot[bot]]

Hey @lindstrom79, I'm here to assist you with any bugs, questions, or contributions you have. Let's get started!

To create a single dashboard in Superset for multiple tenants where each client can only see their own data, you can use Superset's role-based access control (RBAC) and dataset permissions. Here's a structured approach:

1. Dataset Permissions: Assign permissions to datasets so that each client can only access their own data. Use the get_dataset_perm method to define permissions for each dataset.

2. User Roles: Assign roles to users that correspond to the datasets they should have access to. This ensures that users can only see the data they are permitted to view.

3. Enable Dashboard RBAC: Configure the DASHBOARD_RBAC feature in your superset_config.py file:

   FEATURE_FLAGS = {
       'DASHBOARD_RBAC': True
   }

   This allows you to manage dashboard access through roles, specifying which roles can access a particular dashboard.

4. Access Checks: When a user accesses a dashboard, ensure they have the necessary permissions to view the datasets used in the dashboard. This can be done using the can_access_datasource method.

By setting up your datasets with appropriate permissions and assigning roles to users, you can maintain a single dashboard while ensuring each user only sees their own data ^[1][2].

To continue talking to Dosu, mention @dosu.