MENU
When the "Only allow these dashboards" checkbox is selected for a user role, what is the primary effect on users assigned this role?.
The XSOAR RBAC documentation states that role-based permissions can restrict user access to dashboards. When the administrator selects ''Only allow these dashboards'' within a role, the platform enforces a strict limitation: users assigned to this role can view only the dashboards explicitly listed in the role configuration. These dashboards become their default and sole available dashboards. They cannot create new dashboards, modify existing ones, delete dashboards, or access any dashboard not included in the allowed list. This setting is typically used in regulated environments or SOC tiers where dashboard visibility must align with job function and least-privilege principles.
The documentation clarifies that this permission setting removes access to any dashboards not included, overriding normal dashboard-sharing behavior. Therefore, options suggesting the user can modify dashboards (A or B) or automatically gain access to shared dashboards (C) contradict RBAC restrictions. The correct behavior is complete restriction: users can only view the explicitly authorized dashboards, with no ability to modify them. Thus, option D reflects the exact enforced behavior per XSOAR's role permissions model.