Granular access to Liveboards
ThoughtSpot has a user privilege that prevents certain users from creating or modifying Liveboards.
To ensure that users have Read only access, edit the user group permission and select the Cannot copy or edit existing Liveboards privilege.
When a user has Read only access, they are limited to viewing, Exploring, and Presenting the curated Liveboard.
These users cannot perform the following actions that are otherwise available on the Liveboard to most users:
-
Share
-
Pin
-
Download
-
Edit
-
Copy and edit
-
Copy embed link
How to limit access to Liveboards
Follow these steps to limit access to Liveboards:
-
Contact ThoughtSpot Support to enable the feature.
-
Identify users for limited access to curated Liveboards, and assign them to the same User Group.
-
Assign the Cannot copy or edit existing Liveboards privilege to the User Group.
-
Select and Share the curated Liveboards with the User Group.
Example of two User Groups with different access to Liveboards
To demonstrate this, compare the privileges of the users who are members of the Sales user group, and users who are in the Sales Management group.
![Privileges for two different user groups](_images/privilege-cannot-create-update-liveboards.png)
Members of the Sales User Group can only see and explore the curated Liveboards and their component Answers. Notice that members in the Sales Management User Group can also see and explore curated Liveboards, and also copy these Liveboards and perhaps modify them, create their own Liveboards, share Liveboards with other users, and download the chart as an image.
![Available actions for the two user groups](_images/privilege-cannot-create-update-pinboards-available-actions.png)
When initially inviting both sets of users to view curated Liveboards, the Administrator has to Share the Liveboards.
![Available actions for the two user groups](_images/privilege-cannot-create-update-pinboards-share.png)
-
We recommend that you select the option to Give view access to underlying data sources, as it enables the users to explore the data they can see.
-
Set the sharing level for the 'Read only' to Can View. For users with greater access privileges, you may do the same, or choose to set their sharing to Can Edit, depending on the needs of your organization.