---
sourceDocument: Zurich Platform Analytics
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/now-intelligence

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform Analytics

ft:clusterId :

    - par

bundleId :

    - par

workflow :

    - Platform


---

# Dashboard permissions

# Dashboard permissions {#ariaid-title1}

Release version: Zurich  
Updated July 31, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Dashboard permissions

Dashboard permissions in ServiceNow Zurich release provide granular control over viewing, editing, sharing, and deleting dashboards.
These permissions are managed through the Sharing pane and interact with Access Control Lists (ACLs) applied to most widgets on dashboards.
This permission model applies specifically to Core UI dashboards.
Users' ability to access a dashboard also depends on their roles and the roles required for the underlying data.
Show full answer Show less  

## Key Features

* **User Roles and Permissions:**
  * Users without roles can only view dashboards explicitly shared with them and cannot create or edit dashboards.
  * Users with any role can create dashboards, edit dashboards they own or have edit rights on, and share dashboards they own with users and groups.
  * Performance Analytics roles (paadmin, papoweruser) allow managing users, groups, and roles on dashboards they can edit, and the ability to add or remove Performance Analytics widgets.
  * Dashboardadmin and admin roles have full management rights, including editing, sharing, changing ownership, and deleting any dashboard.
  * Dashboard owners can edit, share, and delete their own dashboards.
* **Widget Access Control:**
  * ACLs apply to most widgets except Performance Analytics widgets; users lacking ACLs for a widget see an empty placeholder.
  * ACLs do not apply to aggregated data visualizations (e.g., pie or bar charts) but do apply to list data within widgets.
  * Performance Analytics widgets are visible to all users who can view the dashboard, but only users with specific roles can add or remove them.
  * Real-time scores in Performance Analytics widgets respect user roles and ACLs on the facts table.
* **Additional Controls:**
  * The dashboard's Restrict to role property and dashboard group permissions can further limit access.
  * Domain separation and Explicit Roles settings may affect dashboard visibility and editing capabilities.
  * Administrators may limit users' ability to share dashboards.

## Key Outcomes

* ServiceNow customers can confidently control who can view, create, edit, share, and delete dashboards, tailoring access to organizational roles and security requirements.
* Granular widget-level permissions ensure sensitive data is protected while allowing broad visibility of aggregated data and analytics.
* The integration with Performance Analytics roles enables advanced management and editing of specialized widgets, enhancing dashboard functionality for analytics users.
* Administrators have tools to enforce restrictions via domain separation, explicit roles, and dashboard group permissions, maintaining governance over dashboard access and collaboration.  
Dashboards have special granular view and edit permissions that are managed from the
Sharing pane. Access control lists (ACLs) apply to most widgets that are added to
dashboards.  
Note:  
This topic refers to Core UI dashboards. If you are looking for information about the newer Platform Analytics dashboards, see [Dashboards in Platform Analytics](https://www.servicenow.com/docs/zzjPuhJ_NCJZq7ptHCI8RQ "Dashboards are canvasses for organizing and sharing data visually. They contain data visualizations, filters, and other visual elements.").  
* Users with any role can create dashboards, share dashboards that they own with users and groups, and edit dashboards if they have been given edit permissions. Users with any role can restrict access by role to any dashboard that they have created. The user also needs whatever roles are necessary to access the specific data on the dashboards.
* Users without a role can view dashboards that have been shared with them, but cannot create or edit dashboards.
* Users with pa_admin and pa_power_user roles can manage users, groups, and roles on any dashboard that they can edit. For more information, see [Performance Analytics roles](https://www.servicenow.com/docs/TwglIPRWs5NBPhGvxiss_A "Assign roles to ensure that users can perform all necessary actions.").
* Users with the dashboard_admin or admin role can edit and manage users, groups, and roles for any dashboard. Admin and dashboard_admin users can also change a dashboard owner at any time.
* Only a dashboard owner and users with the dashboard_admin or admin role can delete that dashboard.
* The ability of users to share dashboards may be limited by the administrator. For more information, see [Responsive dashboard properties](https://www.servicenow.com/docs/96Rwp7KbWzpgLAAp37uW7w "Use properties to fine-tune dashboard behavior and appearance.").
* If Explicit Roles are activated, dashboards are treated as internal resources. Users with the snc_external role cannot view dashboards by default. For more information, see [Explicit Roles](https://www.servicenow.com/docs/access?context=explicit-roles&version=zurich&pubname=zurich-platform-security&ft:locale=en-US).
* Domain separation can affect the ability of users to edit dashboards that have been shared with them. For more information, see [Domain separation and responsive dashboards](https://www.servicenow.com/docs/roRMeXyUaqCNuFm~btUuFg "Domain separation is supported in dashboard creation and administration. Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data.").
{#c_DashboardRoles__ul_kvc_zyz_zw}
{#c_DashboardRoles__table_y5q_kgs_25b__entry__6}

|   | View | Create | Edit | Share | Delete |
|-|-|-|-|-|-|
| No role | Only dashboards that have been shared with them. | No | No | No | No |
| Any role | Dashboards that they create and that have been shared with them. | Yes | Only dashboards they have created or that have been shared with them with edit rights. Cannot add or remove Performance Analytics widgets without at least pa_power_user rights. | Only dashboards they have created and only with users and groups. The ability of users to share dashboards may be limited by the administrator. For more information, see [Responsive dashboard properties](https://www.servicenow.com/docs/96Rwp7KbWzpgLAAp37uW7w "Use properties to fine-tune dashboard behavior and appearance."). | Only dashboards they own or have created. |
| admin | All | Yes | Edit and manage dashboard owners, users, groups, and roles for any dashboard. | Yes | Any dashboard |
| dashboard_admin | All | Yes | Edit and manage dashboard owners, users, groups, and roles for any dashboard. | Yes | Any dashboard |
| pa_admin | Dashboards that they create and that have been shared with them. | Yes | Only dashboards they have created or that have been shared with them with edit rights. Can add or remove Performance Analytics widgets. | Only dashboards they have created and only with users and groups. The ability of users to share dashboards may be limited by the administrator. For more information, see [Responsive dashboard properties](https://www.servicenow.com/docs/96Rwp7KbWzpgLAAp37uW7w "Use properties to fine-tune dashboard behavior and appearance."). | Only dashboards they own or have created. |
| pa_power_user | Dashboards that they create and that have been shared with them. | Yes | Only dashboards they have created or that have been shared with them with edit rights. Can add or remove Performance Analytics widgets. | Only dashboards they have created and only with users and groups. The ability of users to share dashboards may be limited by the administrator. For more information, see [Responsive dashboard properties](https://www.servicenow.com/docs/96Rwp7KbWzpgLAAp37uW7w "Use properties to fine-tune dashboard behavior and appearance."). | Only dashboards they own or have created. |
| Dashboard owner | Yes | N/A | Yes | Yes. The ability of users to share dashboards may be limited by the administrator. For more information, see [Responsive dashboard properties](https://www.servicenow.com/docs/96Rwp7KbWzpgLAAp37uW7w "Use properties to fine-tune dashboard behavior and appearance."). | Only dashboards they have created. |
[Table 1. Dashboard permissions and roles]

{#c_DashboardRoles__table_y5q_kgs_25b}

Widget ACLs apply when that widget is added to dashboards (except for Performance Analytics widgets). If a user can
view a dashboard but does not have ACLs to view one of its widgets, an empty widget placeholder
is displayed. ACLs do not apply to data visualizations that aggregate data, such as pie or bar
reports. ACLs always apply to list data that is displayed in widgets. Rows in a list that a user
does not have access to are not displayed.  
Note:  
ACLs are not applied to Performance Analytics widgets that are added to dashboards. Any user who can view a dashboard can view all its Performance Analytics widgets. Performance Analytics widgets can only be added to dashboards by users with the pa_power_user, pa_admin, and admin roles.

However, if a Performance Analytics widget displays real-time scores, the score each
logged-in user sees depends on their roles and the ACLs of the facts table. For more
information, see [Real-time scores](https://www.servicenow.com/docs/HJmIAsdnEOGcaHM7sFOM7g "You can view some Performance Analytics scores in real-time instead of from the most recent data collection job. If real-time scores are enabled, you can view them in KPI Details and in some data visualizations.").

The Restrict to role field on the dashboard properties form and
dashboard group permissions may have an impact on dashboard permissions. The dashboard owner, and
users with pa_power _user, pa_admin, or admin roles can change dashboard properties. Users with
the pa_power_user, pa_admin, and admin roles can change dashboard group permissions.  
For example, when you add a pie report widget with 36 records to a dashboard, users who can access to that dashboard and that report can view the report of all 36 records. However, if a user drills down into the list view for that widget, only the records the user is allowed to access are visible.
**Related concepts**   

* [Administering reports](https://www.servicenow.com/docs/aWCX5MDLOnonL5GSPUTOrg "Learn about the tasks report administrators typically perform, the objects that they work with, and the roles and rules that apply.")  
**Related tasks**   

* [Restrict responsive dashboard access to specific roles](https://www.servicenow.com/docs/qaDiJ~XO0HN6OcTiwUF~uw "Specify additional roles required to access the dashboard when you share a dashboard with specified users, groups, and roles. Only users who the dashboard has been shared with and who have one of the specified roles are able to access the dashboard.")
* [Organize dashboards into groups](https://www.servicenow.com/docs/z7pF8Yz80hd7bxlZDP29hA#t_GroupDashboards "Assign dashboards to groups so that users can find the dashboards they want more easily. Dashboard groups determine how dashboards appear in the dashboard picker when you navigate to Self-Service > Dashboards . You can also add view permissions to dashboard groups.")  
**Related reference**   

* [Performance Analytics roles](https://www.servicenow.com/docs/TwglIPRWs5NBPhGvxiss_A "Assign roles to ensure that users can perform all necessary actions.")