Show only dashboard section of EPiServer to user

Jeroen Mink

Vote:

I would like to setup usergroup that will enable all users in that group to access the dashboard section of EPiServer, but not the CMS part. Currently they see both the dashboard and CMS, and can see all CMS pages with all their properties, which is something i don't want. Is that possible?

#163196

Oct 20, 2016 9:16

Dejan Caric

Vote:

Hi Jeroen,

This is how you can set this up in Alloy.

1. Log in to admin mode and create a new Group called Dashboard
2. Create a new user and assign him to that group
3. Open web.config file and create a new virtual role called DashboardUsers under configuration / episerver.framework / virtualRoles

<add name="DashboardUsers" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="Dashboard" mode="Any" />

4. And then in the web.config file you can set access rights like this:

<location path="EPiServer">
  <system.web>
   ...
    <authorization>
      <allow roles="DashboardUsers, CmsAdmins, CmsEditors" />
      <deny users="*" />
    </authorization>
  </system.web>
   ...
</location>
<location path="EPiServer/CMS/edit">
  <system.web>
    <authorization>
      <allow roles="CmsAdmins, CmsEditors" />
      <deny users="*" />
    </authorization>
  </system.web>
</location>
<location path="EPiServer/CMS/admin">
  <system.web>
    <authorization>
      <allow roles="CmsAdmins" />
      <deny users="*" />
    </authorization>
  </system.web>
</location>

If everything went ok, Dashboard users should only be able to access the dashboard section:

Hope this helps!

#163291

Edited, Oct 20, 2016 10:53