Policy Details for Console Dashboards
You can write policies to control access to the Console Dashboards service.
Resource-Types
dashboards
dashboard-groups
dashboards-family
Supported Variables
The Console Dashboards service supports all the general variables (see General Variables for All Requests).
Details for Verb + Resource-Type Combinations
The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered | 
|---|---|---|---|
| inspect | 
 DASHBOARD_INSPECT  | 
 none  | 
 
 Also need   | 
| read | 
 INSPECT + DASHBOARD_READ  | 
 none  | 
 INSPECT + 
 Also need   | 
| use | 
 READ + DASHBOARD_UPDATE  | 
 none  | 
 READ + 
 Also need   | 
| manage | 
 USE + DASHBOARD_CREATE DASHBOARD_DELETE  | 
 none  | 
 USE + 
 
 Also need   | 
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered | 
|---|---|---|---|
| inspect | 
 DASHBOARD_GROUP_INSPECT  | 
 
  | 
 none  | 
| read | 
 INSPECT + DASHBOARD_GROUP_READ  | 
 INSPECT + 
  | 
 none  | 
| use | 
 READ + DASHBOARD_GROUP_UPDATE  | 
 READ + 
  | 
 none  | 
| manage | 
 USE + DASHBOARD_GROUP_CREATE DASHBOARD_GROUP_DELETE  | 
 USE + 
 
  | 
 none  | 
Permissions Required for Each API Operation
The following table lists the API operations in a logical order, grouped by resource type.
For information about permissions, see Permissions.
| API Operation | Permissions Required to Use the Operation | 
|---|---|
ListDashboards
 | 
DASHBOARD_INSPECT and DASHBOARD_GROUP_READ | 
GetDashboard
 | 
DASHBOARD_READ and DASHBOARD_GROUP_READ | 
CreateDashboard
 | 
DASHBOARD_CREATE and DASHBOARD_GROUP_READ | 
UpdateDashboard
 | 
DASHBOARD_UPDATE and DASHBOARD_GROUP_READ | 
DeleteDashboard
 | 
DASHBOARD_DELETE and DASHBOARD_GROUP_READ | 
ListDashboardGroups
 | 
DASHBOARD_GROUP_INSPECT | 
GetDashboardGroup
 | 
DASHBOARD_GROUP_READ | 
CreateDashboardGroup
 | 
DASHBOARD_GROUP_CREATE | 
UpdateDashboardGroup
 | 
DASHBOARD_GROUP_UPDATE | 
DeleteDashboardGroup
 | 
DASHBOARD_GROUP_DELETE |