Role based user permits

[pradnyasuryakurane]

Hi, we have an oauth based system where we have many kinds of roles predefined. I would like to integrate these roles with Superset. In other words, my user should be able to sign in to our application, and based on his role, he should be able to access the dashboards. So basically, I have many dashboards with many users and I want to restrict each user to some particular dashboards based on their roles from our system. What should be my approach?

[dosubot[bot]]

Hey @pradnyasuryakurane! 👋 I'm here to help you with any bugs, questions, or contributions you have while waiting for a human maintainer. Let's tackle this together!

To integrate role-based access from your OAuth system with Superset and restrict user access to specific dashboards based on their roles, you can follow these steps:

1. Enable DASHBOARD_RBAC Feature: In your superset_config.py file, enable the DASHBOARD_RBAC feature by adding the following configuration:

   FEATURE_FLAGS = {
       'DASHBOARD_RBAC': True
   }

   This feature allows dashboards to be filtered based on roles ^[1].

2. Map OAuth Roles to Superset Roles: Use the AUTH_ROLES_MAPPING configuration to map your OAuth roles to Superset roles. This is done by adding a dictionary in your superset_config.py file that maps OAuth group names to Superset roles. For example:

   AUTH_ROLES_MAPPING = {
       "your_oauth_role": ["SupersetRole1", "SupersetRole2"],
   }

   This configuration ensures that users authenticated via OAuth are automatically assigned the appropriate Superset roles based on their OAuth group membership ^[2].

3. Use DashboardAccessFilter: Superset provides the DashboardAccessFilter class to filter dashboards based on user roles when the DASHBOARD_RBAC feature is enabled. This class checks if the user has access to dashboards via their roles ^[3].

By following these steps, you can effectively integrate your OAuth roles with Superset and control dashboard access based on user roles.

To continue talking to Dosu, mention @dosu.