Share dashboards publicly

Use the NerdGraph API explorer to check the current policy status. Replace 1, 2 with actual account IDs. If you omit account IDs, the call returns your authorized account's status. You can query up to 100 accounts simultaneously.

{
  actor {
    dashboard {
      liveUrlCreationPolicies(filter: { accountIds: [1, 2] }) {
        liveUrlCreationPolicies {
          accountId
          liveUrlCreationAllowed
        }
      }
    }
  }
}

Sample response:

{
  "data": {
    "actor": {
      "dashboard": {
        "liveUrlCreationPolicies": {
          "liveUrlCreationPolicies": [
            {
              "accountId": 1,
              "liveUrlCreationAllowed": true
            },
            {
              "accountId": 2,
              "liveUrlCreationAllowed": false
            }
          ]
        }
      }
    }
  }
}

Use the NerdGraph API explorer to enable or disable the policy. Replace 1, 2 with actual account IDs and set liveUrlCreationAllowed to true or false. You can update up to 100 accounts simultaneously. Each successful update triggers an audit event for the corresponding account.

mutation {
  dashboardUpdateLiveUrlCreationPolicies(
    policies: { accountIds: [1, 2], liveUrlCreationAllowed: true }
  ) {
    liveUrlCreationPolicies {
      accountId
      liveUrlCreationAllowed
    }
  }
}

Sample response. If you provide an unknown account ID, the response shows an UNAUTHORIZED error code.

{
  "data": {
    "dashboardUpdateLiveUrlCreationPolicies": {
      "liveUrlCreationPolicies": [
        {
          "accountId": 1,
          "liveUrlCreationAllowed": true
        },
        {
          "accountId": 2,
          "liveUrlCreationAllowed": true
        }
      ]
    }
  }
}

To create a publicly accessible live URL for your dashboard:

1. Go to one.newrelic.com > Dashboards.
2. Open the dashboard you want to share.
3. In the top-right corner, go to Share > Share dashboard.
4. Click Continue. The Share dashboard dialog appears. Make adjustments as needed:
   • The Protect with a password toggle is on by default. Turn it off only if password protection isn't required.
   • 30 days is the default duration. You can change it from the Link expiration drop-down.
5. Click Save changes.
6. Copy the live URL and password (if enabled) and save them for sharing with external users.

Passwords can't be retrieved later. If you lose it, you'll need to reset the password and share it again. Follow our password management best practices to manage the password securely.

To update the live duration of the shared dashboard, you must have the necessary permissions and be the owner of the dashboard.

1. Go to one.newrelic.com > Dashboards.
2. Open the dashboard you are sharing.
3. In the top-right corner, go to Share > Manage public link.
4. Update the duration from the Link expiration drop-down. The Never expires option keeps the URL live for 20 years.
5. Save your changes.

To enable or disable password protection for the live dashboard URL, you must have the necessary permissions and be the owner of the dashboard.

• If you disable password protection, the existing password is removed and external users can access the dashboard without a password.
• If you enable password protection, share the generated password with the URL to allow external users to access the dashboard.

1. Go to one.newrelic.com > Dashboards.
2. Open the dashboard you are sharing.
3. In the top-right corner, go to Share > Manage public link.
4. To enable or disable password protection, use the Protect with a password toggle.
5. Click Save changes.
6. Copy the live URL and password (if enabled) and save them for sharing with external users.

Passwords can't be retrieved later. If you lose it, you'll need to reset the password and share it again. Follow our password management best practices to manage the password securely.

If you lose the password for the live dashboard URL, you can reset it. For resetting, you must have the necessary permissions and be the owner of the dashboard.

1. Go to one.newrelic.com > Dashboards.
2. Open the password-protected dashboard you are sharing.
3. In the top-right corner, go to Share > Manage public link.
4. Turn on Reset password.
5. Click Save changes.
6. Copy the new password and save it for sharing with external users.

Passwords can't be retrieved later. If you lose it, you'll need to reset it again. Follow our password management best practices to manage the password securely.

You can access shared dashboard names hyperlinked with their live URLs, all in one place in New Relic. Depending on your permissions, you can view either the URLs you created or those created by all users in the account.

To view the shared dashboard URLs:

1. Go to one.newrelic.com.
2. In the left navigation, click your name at the bottom.
3. Navigate to Administration > Shared Dashboards. The Shared Dashboards page lists shared dashboards with their creation and expiration dates, and the owner of each dashboard.

You can click dashboard names to open the sharing pages in a new tab.

Share the live dashboard URL with external users. If the URL is password-protected, also share the password. The following security controls are embedded with password-protected URLs:

• Session-based access: After accessing the dashboard, the session remains active for 120 hours. If they try to access the dashboard after this period, or the browser session expires, they're prompted for the password. If the password is reset, the session expires as soon as the widgets are refreshed and external users must enter the new password.
• reCAPTCHA verification: If there are multiple failed attempts to access the dashboard, external users must complete a reCAPTCHA verification before entering the password again.

Depending on your permissions, you can revoke either the URLs you created or those created by all users in the account. Deleting the dashboard automatically revokes the public sharing URL. If you restore the dashboard, you need to create a new live URL.

You can revoke URLs in the following ways:

• On the dashboard you are sharing, go to Share > Manage public link > in the Share dashboard dialog, click Revoke public link > confirm the revocation.
• From the Shared Dashboards page, go to the icon for the dashboard link > click Revoke > confirm the revocation.

Creating, updating, or revoking shared dashboard URLs generates an audit trail in the NrAuditEvent. To view the records in the query builder:

1. Go to one.newrelic.com > Query Your Data.

2. Select the account from which the public dashboard URLs are created.

3. Run any of the following queries to view the audit trails:

   Get details of the URLs created or revoked in the last hour

   FROM NrAuditEvent
   SELECT *
   WHERE actionIdentifier LIKE '%public_dashboard.%'

   Copia

   Get details of the URLs created in the last hour

   FROM NrAuditEvent
   SELECT *
   WHERE actionIdentifier LIKE '%public_dashboard.create%'

   Copia

   Get details of the URLs revoked in the last hour

   FROM NrAuditEvent
   SELECT *
   WHERE actionIdentifier LIKE '%public_dashboard.revoke%'

   Copia

   Get details of the URLs created by a specific user in the last hour

   Replace <user_email> with the actual user email ID:

   FROM NrAuditEvent
   SELECT *
   WHERE actionIdentifier LIKE '%public_dashboard%'
   AND actorType='user'
   AND actorEmail=<user_email>

   Copia

   Get all the URLs created in an account in the last hour

   Replace <account_id> with the actual account ID:

   FROM NrAuditEvent
   SELECT *
   WHERE actionIdentifier LIKE '%public_dashboard%'
   AND scopeType='account'
   AND scopeId=<account_id>

   Copia

   Get the list of dashboards from which the URLs were generated in a specific time period

   Sugerencia

   The following example query retrieves records from the last week. You can adjust the time period as needed.

   WITH aparse(description, '%for dashboard *') AS dashboardGUID
   FROM NrAuditEvent
   SELECT count(*) AS 'dashboards'
   WHERE actionIdentifier LIKE '%public_dashboard.create%'
   FACET dashboardGUID
   SINCE 1 week ago

   Copia

   Get the list of operations performed with the URLs in a specific time period

   Sugerencia

   The following example query retrieves records from the last week. You can adjust the time period and the facet as needed.

   WITH aparse(description, '%for dashboard *') AS dashboardGUID,
   aparse(actionIdentifier, '%public_dashboard.*') AS publicDashOperation
   FROM NrAuditEvent
   SELECT uniqueCount(actionIdentifier) AS 'number of operations'
   WHERE publicDashOperation IS NOT NULL
   FACET actorEmail, dashboardGUID, publicDashOperation
   SINCE 1 week ago

   Copia

To keep your pricing optimal, consider the following:

• Access control: Manage who can create, edit, or delete URLs at both the account and user-role levels. This helps control and prevent users from having excessive access to these capabilities.
• Link expiration management: Set expiration times for URLs to ensure they're only visible for a certain period, reducing potential overuse.
• Widget management:
  • Add or remove widgets from your internal dashboard to optimize the data being queried.
  • Update widgets to ignore time picker changes, preventing additional queries when users adjust the time range.
  • Manage the refresh rate of each widget to prevent automatic refreshes. For more details, refer to Customize chart refresh rates.

To ensure secure password management for live dashboard URLs, follow these best practices:

• Secure storage: Copy and securely store the generated password immediately after creating or resetting it. New Relic doesn't store or allow retrieval of the password after the initial display.
• Sharing: Use secure methods to distribute the password to your intended audience, such as internal password managers, secure messaging, or one-time secret services. Avoid insecure channels like plain text email.
• Complexity: Passwords are auto-generated in complex format to enhance security. Before protecting the URL with a password, ensure the complexity aligns with the audience's ability to handle the password.
• Suspected compromise: If you suspect the password has been compromised, either reset the password or revoke the live URL to prevent further access. If revoking the URL, create a new live URL and share it with the audience again.