Different roles and groups see different data in the dashboard. about opencti

[nino-filigran]

@misohouse to help you out, can you provide us with:

• capabilities associated with each role
• marking associated with each group
• organisation associated with each user (to which organisation they belong)
• if you have set a platform organisation (visible in setting/security/policies)

[misohouse]

@nino-filigran

Here is information about role and group.
.
.
.
[1] Administrator Role

.
.
[2] Default Role

.
.
[3] External Role

.
.
[4] External account information

.
.
[5] Administrator account information

.
.
If you need more information, I'll add it.

[nino-filigran]

Can you provide the allowed marking fro your groups?

[misohouse]

@nino-filigran
Sure, here it is.
.
.
.
[6] Administrator Groups

.
.
[7] Default Groups

.
.
[8] External Groups

[nino-filigran]

To recap my understanding, users of external group (first screenshot on the right in your ticket) see less info than users from default/admin (first screenshot on the left).

Based on your responses and screenshots, the reason is simple: your external group have less marking than your default admin (in the "allowed markings"). They cannot see anything above TLP:AMBER, which is the reason you have some discrepencies.

[misohouse]

@nino-filigran

If you're right, shouldn't we rather see less information in the External account?

If you look at the screenshot I posted at the very beginning, it actually shows less information in the Administrator account (the dashboard shows no data).

Note that most data is currently written as TLP:GREEN and TLP:CLEAR.

Am I misunderstanding something?

[nino-filigran]

You're completly right, sorry about this, I've mixed up your dashboards and focused on the numbers widgets. I'll keep investigating!

[nino-filigran]

@misohouse sorry for not following up this earlier. Do you still encounter the issue?

[misohouse]

@nino-filigran

Hi, I'm still experiencing the same issue and waiting for a solution.

(Administrator)

(External)

[nino-filigran]

@misohouse we're still trying to understand what could be the issue, however, we struggle with this since we're not able to reproduce at all your situation. I guess since then you've upgraded to most recent version, right? And tried to clear your local storage?

[Kedae]

Hi @misohouse when you have empty widget with your administrator do you have any log ? Could you provide a support package after accessing the dashboard with your admin ?

[misohouse]

@misohouse we're still trying to understand what could be the issue, however, we struggle with this since we're not able to reproduce at all your situation. I guess since then you've upgraded to most recent version, right? And tried to clear your local storage?

Yes I am currently using the latest version, and the local storage is not being cleared because it has existing data.