Sharing Dashboards with anyone - Open Access
This article covers:
- What is Open Access?
- What do I need to use Open Access?
- How to share a dashboard via Open Access
- How to stop sharing a dashboard via Open Access
- How to share an individual tile (Tear off tiles)
- Settings for Open Access dashboards
- FAQs
- Troubleshooting Open Access
- Webinars
What is Open Access?
The Open Access feature allows you to share your dashboards with anyone, even if they are not a licensed SquaredUp DS user. It creates an Open Access version of the original dashboard that can be accessed via its own URL without the need to login. Open Access dashboards are perfect for embedding them in user portals like Sharepoint, pushing them to wall monitors or using them as high-level reports for managers.
Since there's no authentication needed, viewing Open Access dashboards does not consume Named User licenses which means you can share your dashboards with unlimited users.
Creating an Open Access version of your dashboard doesn't change anything about the original dashboard. The original version can still be accessed by logged in users.
How do Open Access dashboards work?
An Open Access dashboard is a less interactive version of the original dashboard.
For SquaredUp DS v4: Less interactive means viewers of the dashboard can't hover to see graph figures and labels or click to drill down. The Open Access dashboard is server-rendered bitmap version of the original dashboard, that refreshes every time the original dashboard refreshes.
For SquaredUp DS v5 and later versions: Less interactive means viewers of the dashboard can hover to see graph figures and labels. If your dashboard contains links to external tools, for example linked rows in a grid, vierwers can click those links. If viewers click on SCOM data to drill down to further data or to update the state of an alert they will have to log in.
You might like to watch this 2 minute introduction to Open Access:
What do I need to use Open Access?
Memory recommendations
Check the Server Spec and Sizing Guidelines (see Server Spec and Sizing) for information about memory recommendations for running Open Access.
Do I have to enable Open Access before I can use it?
Open Access is enabled by default during the installation of SquaredUp DS.
If you skipped the enabling of Open Access during the install process, you can enable it yourself either automatically or manually. Enabling Open Access means giving the SquaredUp DS application pool account read-only permissions in SCOM.
- Browse to
http://SquaredUpServer/SquaredUpv[Version Number]/setup?stage=openaccess
(whereSquaredUpServer
should be replaced by the name of the server where SquaredUp DS is installed).
For example for SquaredUp DS v5 this would behttp://SquaredUpServer/SquaredUp/setup?stage=openaccess
- Complete the Open Access step.
You need to give the SquaredUp DS application pool account read-only permissions in SCOM:
- If SquaredUp DS is installed on a Management Server, add NT AUTHORITY\Network Service to a Read Only SCOM role.
- If SquaredUp DS is installed on a single dedicated server, add the server account (e.g. myserver$) to a Read Only SCOM role.
Note: The SCOM management console does not allow you to add computer or service accounts directly to a SCOM role. Instead you need to use Set-SCOMUserRole PowerShell
cmdlet to add these users.
- Open the Operations Manager Shell: Start > Microsoft System Center > Operations Manager Shell.
- Run the following command in your SCOM powershell.
Get-SCOMUserRole | select Name,Id | ft -auto
- From the list output select your operations manager read-only group ID and save it as the following variable:
$RG = 'Your Group ID'
- From the above list select the name of your read-only group and save as the following variable.
$mg = Get-SCOMManagementGroup
- Run the following command, this will get the security role previously set:
$role = $mg.Security.GetUserRole($RG)
- You need to add your SquaredUp server to the security role. You can do this by running the following command:
$role.Users.Add("<domain>\<server>$")
- Finally run the update command to add this to the role:
$role.Update()
Tip: Alternatively, you can first add the server account to an Active Directory security group and then add the security group to the SCOM role.
How to share a dashboard via Open Access
You can share dashboards and pinned perspectives (see Pinned Perspectives) with Open Access.
Who can share dashboards via Open Access?
That depends on where the original dashboard that you want to make available via Open Access is located:
- Globally viewable dashboards can only be shared by SCOM administrators
- A dashboard that is in a Team Folder (see Team Folders) can be shared by SCOM administrators and users with author or owner permissions on the Team Folder.
Note: Remember that Open Access means that anyone who knows the URL can view the dashboard. The Team Folder permissions and restrictions do not apply to the Open Access version of the dashboard.
How to share a dashboard via Open Access
- Go to the dashboard or pinned perspective you want to create an Open Access URL for.
Note: If you want to create an Open Access URL for a pinned perspective, you need to be on the pinned perspective, not a general perspective that is not pinned. You can make sure you are on the pinned perspective by clicking on the name of the pinned perspective on the navigation bar. If you are on a perspective that is not pinned, you'll see a message that this perspective needs to be pinned first. - Make sure the dashboard or pinned perspective is already published. If it is still a draft, publish it first.
- Click on the share this dashboard button. If you can't see the button, check if you are still in edit mode since this button is only visible when you are not in edit mode.
- You'll see the following sharing options:
Sharing options
- In the Open Access section toggle the enable open access button to on.
- You will see the message 'Preparing your Open Access dashboard, please wait' and a thumbnail of the dashboard itself:
- Click preview to view the dashboard in Open Access mode. The dashboard is given an Open Access URL and enabled for Open Access. You can now give the URL to anyone you want to be able to access the dashboard.
After a dashboard is updated the changes are shown on the Open Access dashboard when it next refreshes, usually in 60 seconds. On SquaredUp DS v4 this may take up to 20 minutes.
How to stop sharing a dashboard via Open Access
- Browse to the right-hand menu ☰ > system > Open Access
- Dashboards which are enabled for Open Access are listed and you can click remove to stop a dashboard being available in Open Access mode.
Tip: If you stop a dashboard being available in Open Access mode and later re-enable it then the dashboard will be given the same Open Access URL that it had previously.
How to share an individual tile (Tear off tiles)
- First ensure that the dashboard that the tile is on has open access enabled. To do this click the Share this dashboard button then toggle enable open access to On See How to share a dashboard via Open Access
- Hover at the top right hand corner of the tile you wish to share and click on the Copy Open Access URL button.
The button won't show if you are in Edit mode, if the dashboard does not have Open Access enabled, or if the dashboard is unpublished or has unpublished changes. - Paste this URL to where you'd like to show the tile, for example a new browser tab, Sharepoint, etc.
- Optionally, you can append
&hideTitleBar=1
to the URL to hide the tile title.
If the dashboard is modified then the tile URL will change and will need to be copied and pasted into your application again.
Tiles do not update in the background.
Pinned Perspectives do not support this feature.
Settings for Open Access dashboards
The Open Access Navigation Bar
The Open Access navigation bar is a different navigation bar to the one you see within SquaredUp DS, it is a navigation bar that is visible when users open an Open Access dashboard.
It is your choice if you want to make the navigation bar visible or not, but if you're using it, it will be visible on all Open Access dashboards.
To make the navigation bar visible, you just have to add at least one dashboard to the Open Access navigation bar from the right-hand menu ☰ > system > Open Access. Once you have done this, the Open Access navigation bar will be visible at the top of the screen on all Open Access dashboards.
Remember that the navigation bar is a global setting that affects all Open Access dashboards, including the ones that are not added to the navigation bar. This means anyone who has access to any Open Access dashboard will be able to see and access the Open Access dashboards that have been added to the navigation bar.
Make sure the dashboard you want to add to the navigation bar has been published and is no longer in draft. Dashboards with a draft cannot be added to the navigation bar.
- Browse to the right-hand menu ☰ > system > Open Access
- In the Navigation Bar section click on the plus button:
- Start typing the name of the dashboard you wish to add to the Open Access navigation bar. SquaredUp DS will return all dashboards matching the text you have typed.
Select the dashboard you're looking for and it will be added to the Open Access navigation bar.Make sure the dashboard you want to add to the navigation bar has been published and is no longer in draft. Dashboards with a draft cannot be added to the navigation bar.
If the dashboard was not already enabled for Open Access mode it will be enabled and the message 'Preparing your Open Access dashboard, please wait' will be shown. - To create a folder on the Open Access navigation bar, type a name that does not match a dashboard and a folder will be created. You can then drag dashboards into the folder.
What is the default page on the Open Access navigation bar?
When you are using the Open Access navigation bar, you get a "default" Open Access page, which is the first dashboard on the Open Access navigation bar (the order of the dashboards on the navigation bar can be changed from the right-hand menu ☰ > system > Open Access.).
You can give users the link to the default Open Access page instead of giving them links to individual dashboards, and they can navigate to all other dashboards on the navigation bar from there. The link has the formathttp://SquaredUpServer/SquaredUpv[Version Number]/openaccess/
where SquaredUpServer
is the server where SquaredUp DS is installed. For example http://SquaredUpServer/SquaredUp/openaccess/
You can also access the default Open Access page by clicking on the SquaredUp logo on the left side of the Open Access navigation bar.
Help for error messages when using the Open Access navigation bar
You may see this message when viewing the open access navigation bar if all the dashboards that were on the open access navigation have had Open Access disabled or are removed from the Open Access navigation bar.
You may see this message when viewing an Open Access URL for a dashboard that was previously enabled for Open Access but has since had Open Access disabled.
Timeframe Settings
The timeframe of a tile defines the period of time for which data is returned, for example "show me data for the last 24 hours".
There are two aspects that influence the timeframe of a tile:
- The timeframe configuration in the tile.
How a tile's timeframe is configured depends on the type of tile:
- Some tiles, like the Azure Log Analytics tile, have a panel in the tile's configuration where you can set the timeframe. How the timeframe is configured is described in the individual tile's article.
- Other tiles, like the Splunk tile, don't have a dedicated timeframe panel but you can specify a timeframe in the query or script the tile uses to return data. How to use timeframe in the tile's query or script is described in the individual tile's article.
- Other tiles, like the Status tiles, don't use any timeframe as the data for those tiles doesn't need a timeframe.
- The current page timeframe of the dashboard or perspective you are looking at. This only affects tiles that use the page timeframe in their configuration.
The page timeframe is the timeframe setting a dashboard or perspective is currently using. These timeframes are all relative to the current time, for example 7 days ago until now. When a user changes the page timeframe, all tiles that have use page timeframe set will adapt to the new timeframe. (Tiles that do not have use page timeframe set (i.e. are set to specific timeframe or custom timeframe) are not affected and won't change.)
The custom option can be used to set timeframes using ISO 8601 format
SquaredUp DS does not support the week notation.
How to change the timeframe for Open Access dashboards
Since users can't change the temporary page timeframe on Open Access dashboards you have to change the default page timeframe to change the timeframe for tiles that use the page timeframe.
The default page timeframe affects two areas:
- Within SquaredUp DS, it decides which timeframe a dashboard or perspective uses when a user goes to the dashboard or perspective. Tiles set to use the page timeframe (not a fixed, specific timeframe) will use the default page timeframe every time the dashboard or perspective is opened. Users can change the page timeframe temporarily while they are on the dashboard or perspective, but their setting will only last until they leave the page. Their setting will only affect their view of the dashboard or perspective, not other users' views.
- On Open Access dashboards, tiles that use the page timeframe according to their settings always use the default page timeframe.
Settings for the default page timeframe
You can change the default page timeframe for individual dashboards, or globally:
- Changing the default page timeframe of a dashboard will affect this individual dashboard and it's Open Access representation. The default page timeframe for perspectives can't be changed individually, they always use the global default page timeframe. Pinned perspectives are treated as dashboards, which means you can change their default page timeframe settings.
- The global default page timeframe is "last 12 hours". Changing this default setting will affect all dashboards (including Open Access dashboards) that don't have an individual default page timeframe setting. Perspectives always use the global default page timeframe as their timeframe can't be changed individually.
Note: If you are sharing the dashboard or pinned perspective via Open Access, these changes will also affect the Open Access dashboard.
Note: You can't change the individual default page timeframe of a perspective.
- Go to the dashboard or pinned perspective you want to change the individual default page timeframe for.
- On the dashboard, click the edit button
- Click the settings button.
- Choose the new default timeframe under Dashboard timeframe.
- Click on the publish button to make the changes go live.
The dashboard will now by default use the page timeframe you chose. Users can still temporarily change the page timeframe while looking at the dashboard.
Tip: If you want to undo the individual page timeframe setting to let the dashboard use the global default timeframe again, you need to switch to the JSON view of the dashboard and delete the parameter that defines the dashboard's pagetimeframe
(for example "timeframe": "last7days
").
Note: This setting affects all dashboards and perspectives (including Open Access dashboards and pinned perspectives on Open Access).
- On the SquaredUp server, run Notepad as administrator (Start, Run, type
notepad
, and then right-click and select Run as administrator). - In your SquaredUp DS folder, go to
\User\Configuration
and find theextensionpacks.json
file.The default location for the SquaredUp folder is
C:\inetpub\wwwroot\SquaredUp
For v5 it is
C:\inetpub\wwwroot\SquaredUpv5
and for v4C:\inetpub\wwwroot\SquaredUpv4
.Name of the SquaredUp folderA custom location may have been chosen during the installation.
The default name of the SquaredUp folder is
SquaredUp
for v6 and above.For v5 it is
SquaredUpv5
, and for v4SquaredUpv4
. - Open the
extensionpacks.json
file and add the propertydefault-timeframe
with the value for your new default page timeframe for all your dashboards and perspectives.
Example for a default timeframe of 24 hours:{ "default-timeframe": "last24hours" }
Possible values for thedefault-timeframe
property:last1hour
,last12hours
,last24hours
,last7days
,last30days
,last3months
,last6months
,last12months
,all
- Save the json file.
- Recycle the SquaredUp DS application pool.
Dark and Light Theme Setting
Open Access dashboards for new installations default to dark theme.
Open Access dashboards on v5 and below default to light theme and retain this default on upgrading to v6.
By default Open Access dashboards use the same theme, for example light theme, as normal dashboards, and all users who navigate to any of the Open Access URLs will be affected by this setting. If required, Open Access dashboards can be given a different theme by changing the global setting for all Open Access dashboards, or changing it on a per dashboard level:
Global Open Access settings can be set and changed in the openaccess.json
file. Global settings affect all Open Access dashboards, but some settings can be overridden on a per dashboard level in Dashboard Settings.
On the SquaredUp server, run Notepad as administrator (Start, Run, type
notepad
, and then right-click and select Run as administrator).With Notepad in administrator mode, open the
openaccess.json
file from the following path in the SquaredUp DS folder:...\User\Configuration\openaccess.json
The default location for the SquaredUp folder is
C:\inetpub\wwwroot\SquaredUp
For v5 it is
C:\inetpub\wwwroot\SquaredUpv5
and for v4C:\inetpub\wwwroot\SquaredUpv4
.Name of the SquaredUp folderA custom location may have been chosen during the installation.
The default name of the SquaredUp folder is
SquaredUp
for v6 and above.For v5 it is
SquaredUpv5
, and for v4SquaredUpv4
.- If openaccess.json is blank or only contains {} then enter the setting and the value you require, for example:
{ "oa-refresh-interval": 120 }
- If openaccess.json already contains settings, then you will need to add a comma at the end of the previous line, and then enter your setting and value, to look something like this:
{ "oa-theme": "darktheme", "oa-refresh-interval": 120 }
- Save the file.
- In IIS recycle the SquaredUp application pool for the setting to take effect.
If you are unable to access SquaredUp DS ("Server Error in '/SquaredUpvx' Application", "SquaredUp DS cannot start due to an error" or "Startup failed for 'Configuration'") after editingopenaccess.json
then there is an error in the file. Correctopenaccess.json
and recycle the SquaredUp DS application pool again.
System > Open Access
This setting allows you to change the theme on a per Open Access dashboard basis.
This setting overrides the global Open Access theme.
Refresh Interval Setting
By default Open Access dashboards use the same refresh rate as normal dashboards, refreshing every 60 seconds, and the last updated time can be seen at the bottom right of the Open Access dashboard. If required, Open Access dashboards can be given a different the refresh rate by changing the global setting for all Open Access dashboards or on a per dashboard level:
Global Open Access settings can be set and changed in the openaccess.json
file. Global settings affect all Open Access dashboards, but some settings can be overridden on a per dashboard level in Dashboard Settings.
On the SquaredUp server, run Notepad as administrator (Start, Run, type
notepad
, and then right-click and select Run as administrator).With Notepad in administrator mode, open the
openaccess.json
file from the following path in the SquaredUp DS folder:...\User\Configuration\openaccess.json
The default location for the SquaredUp folder is
C:\inetpub\wwwroot\SquaredUp
For v5 it is
C:\inetpub\wwwroot\SquaredUpv5
and for v4C:\inetpub\wwwroot\SquaredUpv4
.Name of the SquaredUp folderA custom location may have been chosen during the installation.
The default name of the SquaredUp folder is
SquaredUp
for v6 and above.For v5 it is
SquaredUpv5
, and for v4SquaredUpv4
.- If openaccess.json is blank or only contains {} then enter the setting and the value you require, for example:
{ "oa-refresh-interval": 120 }
- If openaccess.json already contains settings, then you will need to add a comma at the end of the previous line, and then enter your setting and value, to look something like this:
{ "oa-theme": "darktheme", "oa-refresh-interval": 120 }
- Save the file.
- In IIS recycle the SquaredUp application pool for the setting to take effect.
If you are unable to access SquaredUp DS ("Server Error in '/SquaredUpvx' Application", "SquaredUp DS cannot start due to an error" or "Startup failed for 'Configuration'") after editingopenaccess.json
then there is an error in the file. Correctopenaccess.json
and recycle the SquaredUp DS application pool again.
On the dashboard you wish to change the setting for:
Edit mode > Settings > Dashboard refresh
By default dashboards (and their Open Access versions) refresh every 60 seconds.
This setting allows you to change the refresh interval on a per dashboard basis, both for the normal dashboard and its Open Access version.
This setting overrides the global dashboard refresh interval.
For example, you may need to reduce the load on your external data, or for an API that has an access cost.
You can increase the refresh interval in increments, up to 6 hours. You can also decrease the interval down to 30 seconds on any given dashboard if you need to see the data refreshed more often.
Interaction Setting
By default Open Access dashboards allow drilldown or prompt the user to login. If required, drilldown can be switched off on a per dashboard level:
Global Open Access settings can be set and changed in the openaccess.json
file. Global settings affect all Open Access dashboards, but some settings can be overridden on a per dashboard level in Dashboard Settings.
On the SquaredUp server, run Notepad as administrator (Start, Run, type
notepad
, and then right-click and select Run as administrator).With Notepad in administrator mode, open the
openaccess.json
file from the following path in the SquaredUp DS folder:...\User\Configuration\openaccess.json
The default location for the SquaredUp folder is
C:\inetpub\wwwroot\SquaredUp
For v5 it is
C:\inetpub\wwwroot\SquaredUpv5
and for v4C:\inetpub\wwwroot\SquaredUpv4
.Name of the SquaredUp folderA custom location may have been chosen during the installation.
The default name of the SquaredUp folder is
SquaredUp
for v6 and above.For v5 it is
SquaredUpv5
, and for v4SquaredUpv4
.- If openaccess.json is blank or only contains {} then enter the setting and the value you require, for example:
{ "oa-refresh-interval": 120 }
- If openaccess.json already contains settings, then you will need to add a comma at the end of the previous line, and then enter your setting and value, to look something like this:
{ "oa-theme": "darktheme", "oa-refresh-interval": 120 }
- Save the file.
- In IIS recycle the SquaredUp application pool for the setting to take effect.
If you are unable to access SquaredUp DS ("Server Error in '/SquaredUpvx' Application", "SquaredUp DS cannot start due to an error" or "Startup failed for 'Configuration'") after editingopenaccess.json
then there is an error in the file. Correctopenaccess.json
and recycle the SquaredUp DS application pool again.
System > Open Access
This setting allows you to switch off interaction on a per Open Access dashboard basis.
FAQs
- Users of Open Access dashboards can hover to see graph figures and labels, but will be presented with a logon box if they click to drill down for more information.
- SCOM On-Demand tasks (see How to use the SCOM Task tile) cannot be run on Open Access dashboards, because Open Access is unauthenticated, so you will see the error
MISSING_SCOM_PERMISSION
.
- As Open Access users will not be able to hover or drill down for more information you may wish to design your dashboards slightly differently with Open Access in mind. For example, you should consider adding a key to a performance line graph.
- Web Content tiles (iframes) are not officially supported with Open Access, because in many cases they do not work:
- Slow webpages will show as blank in Open Access.
- Webpages requiring authentication will not work on an Open Access page because Open Access does not use any authentication.
- Open Access displays the Web Content tile using a built in browser, that may support different features from your client browser.
- SCOM On-Demand tasks (see How to use the SCOM Task tile) cannot be run on Open Access dashboards, because Open Access is unauthenticated, so you will see the error
MISSING_SCOM_PERMISSION
.
No. If you share a dashboard within a Team Folder (see Team Folders) as Open Access by enabling Open Access URL, this dashboard will potentially be viewable by all users, and viewing will not controlled by the Team Folder permissions.
Troubleshooting Open Access
Before you read through the troubleshooting articles, here are some tips for fixing common Open Access issues:
- Many issues can be resolved by disabling and re-enabling Open Access for a dashboard (see How to stop sharing a dashboard via Open Access and How to share a dashboard via Open Access).
This will ensure that the SquaredUp DS application pool account has read-only permissions in SCOM. - On SquaredUp DS v5:
Re-generate the Open Access dashboard experiencing problems via the generate option.If one particular dashboard is experiencing issues with Open Access we recommend you rerun the generate option for that dashboard.
To do this in SquaredUp DS click the top right-hand menu ☰ system > open access then click the generate link next to that particular Open Access dashboard.
Alternatively, from the dashboard itself you can disable Open Access and re-enable it, by toggling from on to off to on again, which will also run the regenerate option.
You will see the message 'Preparing your Open Access dashboard, please wait':
- On SquaredUp DS v4:
Check the loopback URL: Checking the Open Access Loopback URL on v4
For more information see Troubleshooting Open Access (v5) or Troubleshooting Open Access (v4)
Webinars
This webinar gives you an in-depth explanation about how Open Access works on v4, from how to share dashboards to the underlying architecture:
The webinar below (32 mins) covers building and sharing SquaredUp DS dashboards for use on wall monitors, or embedding into other portals (such as SharePoint, Intranet, ITSM or other monitoring tools):