Enable sharing in Camunda Cloud

Problem Definition

User Story

As a process owner
I want to share my dashboards and reports
So that my stakeholders or customers can understand the data

Use Cases

• (MH) Dashboards and reports can be shared with non-Optimize users in CCSM
• (MH) Dashboards and reports can be shared with non-Optimize users in CC SaaS
• (SH) Dashboards and reports can be securely shared

PM Notes (Customer requests, context, assumptions)

• Currently sharing is not enabled in Camunda cloud SaaS or CCSM. We would like to have this feature enabled to close the feature gap between cloud and platform
• Sharing suggests the customer is getting value out of Optimize
• Existing shared links are public-facing, representing a security risk
• Some elements of the single process summary page (OPT-6019) are highly shareable, especially with leaders who might not have accounts with Camunda. Some options are sharing via email.
• One customer has recently made an FR about sharing (OPT-6033), and there are a few other FRs. Specific to OPT-6033, the user wants an interactive, filterable dashboard
• Some of our customers (e.g. nexxbiz, webalo) implement Camunda in 3rd party organizations
• Security is OK, but we should consider ways to improve it
  • Once a public URL leaks, the user can simply unshare and reshare to generate a new sharing link
  • The existing URLs are relatively obscure since they contain a full UUID4
  • I assume configurable password protection is sufficient as we can't rely on SSO authentication for viewing. We might even get away with a password in the query string of a direct link, which isn't much more secure than our current approach. Nobody has complained so far, so maybe it's not an issue?
• This is currently disabled via config in the controller for Cloud SaaS and via an environment variable (that resolves to the same config option) for CCSM

Solution Definition

Solution Ideas

Design Notes (Videos, mockups, guidance)

User Scenario

GIVEN
(MH/SH/NTH) WHEN
(MH/SH/NTH) THEN

Metrics (if applicable)

• Number of times a dashboard has been shared
• Number of times a report has been shared
• Number of times a shared dashboard has been viewed
• Number of times a shared report has been viewed