Chart Permissions
Chart permissions control who can access one specific chart. You can grant access to users, roles, departments, or the whole organization.
This is different from the page-level Visualization permission. Page-level permission controls whether a person can enter the module or use actions such as create and export. Chart permissions control whether that person can view, edit, or delete one chart after the chart is already in the system.
When To Use
Use chart permissions when different charts in the same workspace should be visible to different audiences.
Common examples:
| Scenario | Recommended Setup |
|---|---|
| Only managers should see a management dashboard | Add the manager role or department to the chart permission list |
| Regional teams should edit only their own charts | Give each region's role or department View and Edit on its own charts |
| Sensitive charts should be visible to a small group | Add only the required users, roles, or departments |
| A shared chart should be visible to everyone | Leave chart permissions empty, or add the organization as a visible subject |
Permission Model
Each chart permission entry includes one subject and its allowed actions.
Supported subjects:
| Subject Type | Meaning |
|---|---|
| User | One specific member account |
| Role | A role code or role assignment |
| Department | One department |
| Organization | The current organization scope |
Supported actions:
| Action | Meaning |
|---|---|
| View | Open and view the chart. This action is always enabled for a permission entry |
| Edit | Modify chart configuration and save changes |
| Delete | Delete the chart |
View is the base permission. When you add a subject to the chart permission list, View is always included. Edit and Delete are optional.
Default Behavior
If a chart has no chart permission entries, the chart is visible to everyone who already has page-level access to Visualization.
After at least one chart permission entry is configured, the chart becomes restricted. Only subjects that match an entry with the required action can use that action.
Space administrators are not blocked by chart permission entries.
Open The Permission Panel
- Open Visualization
- Open an existing chart, or create a new chart and enter the editor
- In the left activity area, switch to Permissions
- Use the permission panel to add subjects and configure actions
Add A Subject
- In Permissions, click Add Subject
- Select one or more subjects from users, roles, departments, or organization
- Confirm the selection
Each new subject is added as one permission entry.
By default:
| Field | Default Value |
|---|---|
| View | Enabled |
| Edit | Disabled |
| Delete | Disabled |
The panel prevents adding the same subject repeatedly.
Edit Permissions In Batch
You can edit multiple permission entries together.
- In the permission list, select one or more subjects
- Click Edit Selected
- Enable or disable Edit and Delete
- Click Apply
Batch editing keeps View enabled for the selected subjects.
Remove A Subject
To remove one subject:
- Find the subject in the permission list
- Click the delete action on that row
To remove multiple subjects:
- Select multiple permission entries
- Click the batch delete action
Removing a subject removes all chart-level permissions for that subject on the current chart.
How Chart Permissions And Page Permissions Work Together
Both layers must allow the action.
| Action | Required Conditions |
|---|---|
| Open chart | The user has page-level chart view permission, and the chart permission list allows View or is empty |
| Edit chart | The user has page-level chart edit permission, and the chart permission list allows Edit or is empty |
| Delete chart | The user has page-level chart delete permission, and the chart permission list allows Delete or is empty |
| Export chart or data table | The user has page-level chart export permission. Export is not configured separately inside chart permission entries |
This means a user might be able to open Visualization but still not be able to open one restricted chart. It also means a user with chart-level Edit still cannot edit if the page-level edit permission is missing.
Recommended Operation Pattern
For most teams, this pattern is the easiest to maintain:
- Use page-level permissions in role management to control who can enter Visualization, create charts, edit charts, delete charts, and export
- Use chart permissions only for exceptional charts that need narrower visibility
- Prefer roles or departments over many individual users when the audience is stable
- Leave chart permissions empty for common public charts inside the workspace
Troubleshooting
A user can enter Visualization but cannot find a chart
Check whether the chart has chart permission entries. If it does, confirm that the user matches at least one subject with View.
A user can view a chart but cannot edit it
Check both layers:
- The chart permission entry must have Edit
- The user's page-level Visualization edit permission must also be enabled
A user can view a chart but cannot delete it
Check both layers:
- The chart permission entry must have Delete
- The user's page-level Visualization delete permission must also be enabled
A user can view a chart but cannot export
Export is controlled by the page-level export permission, not by chart permission entries.