How to restrict data access per customer in an embedded dashboard?

To restrict data access per customer in an embedded dashboard, use Draxlr's hidden filters and backend API feature.

Here's how it works:

1. Add a filter to your dashboard based on a customer identifier (e.g., user_id, tenant_id, or company_id).
2. In the Embed Settings, hide the filter so end users cannot see or modify it.
3. Set the default value for the filter to the specific customer's ID.
4. Enable the backend API option to pass the filter value server-side, preventing frontend manipulation.

Each customer gets their own embed configuration with their tenant ID pre-set and hidden. They see only their data, and because the filter value is passed through your backend, there is no way for them to access another customer's data through the browser.

This approach is simpler than building row-level security from scratch and works out of the box with Draxlr.