Include dashboards in Security Access configuration

Background
We recently created a dedicated group to manage and restrict access to infrastructure-related information. This group has been granted access only to specific application perspectives and selected websites, ensuring that sensitive infrastructure data is available exclusively to authorized users. The goal is to enhance security and maintain better control over critical system insights.

However, under the current configuration, users within this group are still able to access, create, and copy dashboards that contain infrastructure metrics. This behavior bypasses the intended access restrictions and may expose sensitive data.

Proposed Enhancement
We propose the addition of a new configuration option under:

Settings → Groups → Security & Access → Edit Access Configuration

This enhancement would introduce a Dashboard Access control setting with the following options:

Access All – Full access to all dashboards.
Limited Access – Access only to dashboards explicitly assigned to the group.
No Access – No visibility into any dashboards.
Additionally, we propose a Read-Only mode for dashboards, which would allow users to view but not create or modify dashboards. This would align dashboard permissions with existing controls for other components such as application perspectives and websites.

Justification
The current behavior allows users to interact with dashboards containing infrastructure data, even when their infrastructure access is set to "No Access." This undermines the security model and creates a gap in access governance. Introducing granular dashboard permissions will ensure consistency across access controls and reduce the risk of unauthorized data exposure.