Should Viz_creator share dashboard/Visualizations with ITIL roles?

[maggieo]

I am trying to understand:

1) I see users with viz_creator have the ability to share their dashboards and visualizations with roles. My concern is that this will create a situations where thousands for visualizations are shared with a large number of users and soon no one will be able to find anything. 

2) Is there a way to restrict sharing with roles? so users can only share with assignment groups or individual users?

3) How the Viz_creator or viz_admin roles are assigned to users? what is the role hierarchy (is there a doc like PA Hierarchy? is this inherited form another role? 

Any assistance to help me understand the viz_creator and viz_admin roles is very much appreciated

Maggie

[jeffrubinoff · Accepted solution]

Maggieo,

Are you sure that users with viz_creator have the ability to share data vizualizations with roles. I have just tested this, and only viz_admin could share data visualizations with roles.

The viz_creator and viz_admin roles have no dashboard privileges associated with them. Anyone who creates a dashboard or has a dashboard shared with them with share privileges can share that dashboard with roles. The dashboard_admin roles extends this to all dashboards. However, dashboards can only be shared on specific workspaces, which should keep the number of available dashboards reasonable. See the dashboard documentation.

I am in the middle of writing a doc for Platform Analytics along the lines of the Performance Analytics Roles doc, by the way. Meanwhile, these are my drafts for viz_admin and viz_creator:
viz_admin: 

Can create data visualizations. Can also edit, delete, export, and share all data visualizations, including sharing with roles. Can also schedule the export of visualizations.

viz_creator:

Can create data visualizations. Can also edit, delete, export, and share the data visualizations that they have created. Can only share visualizations with groups and users.

[maggieo]

Hi Jeff, thanks for your response. You are right, they can't share with the role, but can share with security groups. I'm wondering if this can be changed to just sharing with Assignment groups. 
Any ITIL user can create dashboards in the Platform analytics workspace, and here is where I'm anticipating to eventually see thousands of dashboards.

After further research, I think I know where the viz_admin role is inherited from. It's coming from Pa_admin and ITIL_admin roles.