{"id":4665,"date":"2020-04-22T11:30:51","date_gmt":"2020-04-22T09:30:51","guid":{"rendered":"http:\/\/contoso.se\/blog\/?p=4665"},"modified":"2020-04-22T11:30:52","modified_gmt":"2020-04-22T09:30:52","slug":"sharing-dashboards-and-workbooks-in-the-azure-portal","status":"publish","type":"post","link":"http:\/\/contoso.se\/blog\/?p=4665","title":{"rendered":"Sharing dashboards and workbooks in the Azure Portal"},"content":{"rendered":"\n<p>Sharing dashboards and workbooks can be a bit tricky the first time. &nbsp;<\/p>\n\n\n\n<p>A key thing to keep in mind when sharing workbooks and dashboards is that the user needs access to both the workbook or dashboard resource, and its data source.<\/p>\n\n\n\n<p>Looking at the figure below, we have a dashboard named \u00e2\u20ac\u0153Contoso Dashboard\u00e2\u20ac\u009d that contains several tiles (colorful boxes). Each of these tiles has its data source (black cylinder). For example, the green tile can show recommendations for Active Directory. Active Directory assessment data comes from a table in the Log Analytics workspace.<\/p>\n\n\n\n<p>The user of the \u00e2\u20ac\u0153Contoso Dashboard\u00e2\u20ac\u009d then needs access both to the dashboard itself and the Active Directory assessment data in the Log Analytics workspace.<\/p>\n\n\n\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large is-resized\"><a href=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard001.jpg\"><img decoding=\"async\" loading=\"lazy\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard001.jpg\" alt=\"\" class=\"wp-image-4666\" width=\"548\" height=\"552\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard001.jpg 730w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard001-298x300.jpg 298w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard001-150x150.jpg 150w\" sizes=\"(max-width: 548px) 100vw, 548px\" \/><\/a><\/figure><\/div>\n\n\n\n<p>Let\u00e2\u20ac\u2122s do an example. In this example, we will share a dashboard and a workbook with a guest using a Microsoft account (contoso.guest@outlook.com). The Microsoft account is not a member of our Azure AD or have any other permissions in the Azure subscription.<\/p>\n\n\n\n<h3>Sharing Dashboards<\/h3>\n\n\n\n<p>First, we create a dashboard, with only a clock, and share it with the guest account.<\/p>\n\n\n\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002.jpg\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"369\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002-1024x369.jpg\" alt=\"\" class=\"wp-image-4667\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002-1024x369.jpg 1024w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002-300x108.jpg 300w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002-768x277.jpg 768w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002-1536x554.jpg 1536w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard002.jpg 1781w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard003.jpg\"><img decoding=\"async\" loading=\"lazy\" width=\"458\" height=\"634\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard003.jpg\" alt=\"\" class=\"wp-image-4668\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard003.jpg 458w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard003-217x300.jpg 217w\" sizes=\"(max-width: 458px) 100vw, 458px\" \/><\/a><\/figure><\/div>\n\n\n\n<p>The guest can now access the dashboard and see the clock. Essential to make sure the correct Azure AD directory is selected; else, the dashboard will not load in the Azure portal for the guest.<\/p>\n\n\n\n<p>If we add two tiles from Log Analytics, we can see in the left part of the image below that the guest doesn\u00e2\u20ac\u2122t have permission to load the Log Analytics data. On the right side of the image below, the portal is loaded with a contributor account.<\/p>\n\n\n\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard004.jpg\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"420\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard004-1024x420.jpg\" alt=\"\" class=\"wp-image-4669\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard004-1024x420.jpg 1024w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard004-300x123.jpg 300w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard004-768x315.jpg 768w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard004.jpg 1106w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure><\/div>\n\n\n\n<p>Once we assign the guest Monitor Reader permissions on the Log Analytics workspace, the guest can load the tiles in the dashboard. The Monitor Reader gives the guest access to only monitoring data in the workspace.<\/p>\n\n\n\n<h3>Sharing Workbooks<\/h3>\n\n\n\n<p>If you pin tiles from a workbook to a dashboard, the guest doesn\u00e2\u20ac\u2122t need to have access to the workbook itself, and the tile will still show data if the guest has access to the data source. If the guest clicks the tile, it is only the specific tile that will be loaded in a temporary workbook. In the example below, the guest only has access to data for one of the tiles.<\/p>\n\n\n\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard006.jpg\"><img decoding=\"async\" loading=\"lazy\" width=\"991\" height=\"341\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard006.jpg\" alt=\"\" class=\"wp-image-4670\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard006.jpg 991w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard006-300x103.jpg 300w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard006-768x264.jpg 768w\" sizes=\"(max-width: 991px) 100vw, 991px\" \/><\/a><\/figure><\/div>\n\n\n\n<p>It works very much the same as sharing dashboards. You need to share both data sources and the workbook resource itself. If you don\u00e2\u20ac\u2122t share the workbook item itself, the following error might be shown.<\/p>\n\n\n\n<div class=\"wp-block-image is-style-default\"><figure class=\"aligncenter size-large\"><a href=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007.jpg\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"160\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007-1024x160.jpg\" alt=\"\" class=\"wp-image-4671\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007-1024x160.jpg 1024w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007-300x47.jpg 300w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007-768x120.jpg 768w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007-1536x241.jpg 1536w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard007.jpg 1908w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure><\/div>\n\n\n\n<p>Using only the \u00e2\u20ac\u0153Share Report\u00e2\u20ac\u009d feature at a workbook will not assign the necessary guest permissions, that must be done on the workbook resource item. In my examples I have used the Reader role on the workbook resource.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"126\" src=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard008-1024x126.jpg\" alt=\"\" class=\"wp-image-4672\" srcset=\"http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard008-1024x126.jpg 1024w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard008-300x37.jpg 300w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard008-768x95.jpg 768w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard008-1536x189.jpg 1536w, http:\/\/contoso.se\/blog\/wp-content\/uploads\/2020\/04\/SharedDashboard008.jpg 1697w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>You can read more about the different role assignments for monitoring data here:<\/p>\n\n\n\n<ul><li><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/roles-permissions-security\">https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/roles-permissions-security<\/a><\/li><li><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-access\">https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-access<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Sharing dashboards and workbooks can be a bit tricky the first time. &nbsp; A key thing to keep in mind when sharing workbooks and dashboards is that the user needs access to both the workbook or dashboard resource, and its data source. Looking at the figure below, we have a dashboard named \u00e2\u20ac\u0153Contoso Dashboard\u00e2\u20ac\u009d that &hellip; <a href=\"http:\/\/contoso.se\/blog\/?p=4665\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[64,75,71],"tags":[88,77,72,87],"_links":{"self":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4665"}],"collection":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4665"}],"version-history":[{"count":2,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4665\/revisions"}],"predecessor-version":[{"id":4674,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4665\/revisions\/4674"}],"wp:attachment":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4665"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}