Dashboard visibility for PHI with running user and dynamic dashboards
Key Takeaway
When a dashboard runs as a specific user, every viewer sees data based on that user's access, not their own.
Every Salesforce dashboard shows data through the access of a running user, who may not be the person looking at the dashboard. Choosing between a static dashboard and a dynamic dashboard is the main way to keep sensitive data in Agentforce Health dashboards away from people who should not see it.
What the running user controls
A dashboard shows data from each component's source report. Viewers see that data based on the privileges and access of the dashboard's running user, so changing the running user is how you control which data viewers see.
A static dashboard uses one configured running user, so every viewer sees the same data based on that user's privileges. A dynamic dashboard runs as the logged-in user, so each viewer sees only the data they have access to.