Skip to content

Who can view, edit and build ​

For site owners

This page explains who can do what in Sintel BI on your site, and how to control it. For access to the site itself, including guests, see Permissions required: site and guest access.

The roles ​

Sintel BI decides what each person can do from their SharePoint permissions on the site and from how each dashboard is shared.

WhoWhat they can do
Site owners (anyone with Full Control on the site, which includes the Manage web site permission)Everything: create and edit data sources and dashboards, see and edit every dashboard, share dashboards, and change the Sintel BI settings and navigation.
People a dashboard is shared with as Can editOpen, change, share and delete that dashboard. They can't create new dashboards or data sources, and can't change data sources or settings.
People a dashboard is shared with as Can viewOpen that dashboard.
Everyone with access to the siteOpen public dashboards. A public dashboard is view-only for anyone who isn't a site owner or shared with Can edit.

Only site owners can create dashboards and data sources. Everyone else only sees the dashboards that are public or shared with them; other dashboards don't appear in their navigation or on the Dashboards page.

On phones and tablets everyone is view-only, site owners included. See Requirements and limits.

Share a dashboard ​

Open the Dashboards page, open the menu on the dashboard's tile and click Share, or click the share icon on its row in Settings > Navigation. In the Manage Access panel:

  • Switch on Public dashboard to let everyone with access to the site view it.
  • Under Direct access, click +, pick people or SharePoint groups and choose Can view or Can edit.

See Navigation: Who can see an item. Individual components can also be limited to certain people, see Security Settings.

SharePoint groups, not Entra ID groups

You can share with people and SharePoint groups. Microsoft Entra ID groups aren't offered in Manage Access. See Cannot share dashboards with Entra ID groups.

Restrict who can edit ​

  1. Keep the site's Owners group (Full Control) to the people who should build dashboards and data sources.
  2. Share dashboards with Can view unless someone needs to change them. People with Can edit can also share the dashboard further and delete it.
  3. To take edit access away, open Manage Access for the dashboard and change or remove the person or group under Direct access.

Viewers need access to the data ​

Sintel BI reads SharePoint lists and Excel files with each user's own permissions. Someone who can open a dashboard but can't read its source list or file sees an error on those widgets instead of data. Give viewers at least Read access to the lists, libraries and files the dashboard uses.

MS SQL data is different: it's loaded by the Sintel BI backend with the data source's connection string, so everyone who can open the dashboard sees it. See Security and data.

Why Visitors have Edit on some lists ​

Sintel BI stores dashboards and their components in lists on the site. When someone with Can edit saves a dashboard, their browser writes to those lists, so setup gives the site's Visitors group Edit on four of them. See Lists used by Sintel BI.

That list permission doesn't let a visitor edit dashboards in Sintel BI: the app checks the dashboard's sharing before it shows or saves anything. Dashboard sharing controls what people can do in Sintel BI. Who can see the underlying data is still decided by the permissions on your source lists and files.

Licence administrators ​

Managing Sintel BI licences is a separate role, assigned in Microsoft Entra ID. Being a site owner isn't enough. The licence management service is listed under Hosts to allow.