Skip to main content

Dashboard Access Management

The Dashboard Access Management backend manages sharing and permission control for Superset dashboards. It is the service the BFF calls when a user grants or revokes access to a dashboard from the Cogrion UI.

What It Does​

  • Tracks dashboard-level sharing grants between users and groups
  • Exposes an API the BFF uses to read and write dashboard permissions
  • Persists sharing state independently from Superset's own permission model, enabling finer-grained sharing workflows

Components​

ComponentDescription
ServiceCustom backend (dashboard-access-management) — Keycloak OIDC auth, REST API
PostgreSQLStores dashboard sharing records and permission state

Authentication​

Keycloak OIDC via a dedicated OAuth client provisioned at deploy time.

Go Deeper​

  • Superset — the dashboard application whose sharing this service manages
  • BFF API — proxies sharing requests from the Cogrion UI to this service