Hi Jeroen,

This is how you can set this up in Alloy.

1. Log in to admin mode and create a new Group called Dashboard
2. Create a new user and assign him to that group
3. Open web.config file and create a new virtual role called DashboardUsers under configuration / episerver.framework / virtualRoles

<add name="DashboardUsers" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="Dashboard" mode="Any" />

4. And then in the web.config file you can set access rights like this:

<location path="EPiServer">
  <system.web>
   ...
    <authorization>
      <allow roles="DashboardUsers, CmsAdmins, CmsEditors" />
      <deny users="*" />
    </authorization>
  </system.web>
   ...
</location>
<location path="EPiServer/CMS/edit">
  <system.web>
    <authorization>
      <allow roles="CmsAdmins, CmsEditors" />
      <deny users="*" />
    </authorization>
  </system.web>
</location>
<location path="EPiServer/CMS/admin">
  <system.web>
    <authorization>
      <allow roles="CmsAdmins" />
      <deny users="*" />
    </authorization>
  </system.web>
</location>

If everything went ok, Dashboard users should only be able to access the dashboard section:

Hope this helps!