As no user is logged in when Open Access dashboards are being used, the SquaredUp enterprise application (service principal) is used, and needs to be assigned the reader role.
Open Access dashboards will only show resources, resource groups or subscriptions for which the enterprise application has at least the role of Reader.
If the SquaredUp Azure enterprise application has not been given access to any of the resources or subscriptions that a tile is scoped to then users will see zero cost or one of the following messages depending on the tile:
No resources matched the specified scope.
No entities found.
The subscription was not found in the list of available subscriptions.
There are no Azure subscriptions available: Check the Access Control (IAM) role and scope for the subscriptions you intend to access.
Check the Server Spec and Sizing guidelines for information about memory recommendations for running Open Access.
About Open Access
Open Access enables easy sharing of dashboards throughout your organization. Open Access allows users to view a version of the dashboard with simplified interactivity. Open Access dashboards do not require authentication and do not consume Named User licences.
When users view an Open Access dashboard on SquaredUp v5 they see a version of the dashboard with simplified interactivity. On SquaredUp v4 Open Access dashboards are server-rendered bitmap versions of the dashboard.
Users can view hover-over text, such as graph figures, and line highlighting on graphs without authentication. Only if a user clicks to drill down to further data or to update the state of an alert, then they will be prompted to log in (if they are not already logged in).
When Open Access is enabled, normal dashboards can still be accessed on the normal URL and will work as you'd expect, but individual dashboards can be made Open Access and then accessed from a distinct Open Access URL.
You can choose to use the Open Access navigation bar to give easy access to a range of Open Access dashboards, or simply give users an individual Open Access dashboard URL without the navigation bar. See How to publish dashboards with Open Access
You might like to watch this 2 minute introduction to Open Access:
Assigning the reader role to the SquaredUp enterprise application
To allow resources to show on Open Access dashboards you need to give the SquaredUp enterprise application a minimum of the Reader role.
- In the Azure portal browse to the resource, resource group or subscription you wish to give access to.
- On the menu, click on
Access control (IAM).
- Click the Add button, then
Add role assignment
- In the Role box type
Readerand select it from the list.
- In the Select box type
SquaredUpAzureand select your SquaredUp enterprise application. (If you have several SquaredUp applications you can identify the correct enterprise application by searching and opening
Enterprise Applications> searching for
SquaredUpAzure> clicking on the application with your SquaredUp server name in the Homepage URL column > clicking the Copy to clipboard button next to the Name > pasting the full name with GUID in the box here).
- Click the Save button.
- Now restart your SquaredUp virtual machine to allow the role take effect.
- Check that the Open Access page now shows the resource, resource group or subscription you gave access to.
Publishing Open Access dashboards
You can choose to use the Open Access navigation bar to give easy access to a range of Open Access dashboards, or simply give users an individual Open Access dashboard URL without the navigation bar.
Troubleshooting Open Access
Many issues can be resolved by rerunning the Open Access configuration to ensure that the SquaredUp enterprise application has at least the minimum of the Reader role. See Enabling Open Access
On SquaredUp v5 we also recommend rerunning the generate option for the Open Access dashboard experiencing problems, and on SquaredUp v4 it is important to check the loopback URL.