Overview#
Personalised dashboard workspaces for every user: widgets can be dragged, resized, hidden, and grouped across multiple named dashboards, and layouts persist automatically, restoring exactly on next login across every device the user works from.
A senior analyst managing three active investigations on a Monday morning does not want to hunt through the same generic interface as a system administrator reviewing provisioning queues. The Dashboard Layout Customisation module lets each user build a workspace that reflects what they actually do.
Each user's layout is stored independently and isolated to their organisation. No configuration change one user makes can affect anyone else's workspace, even within the same tenant.
Open Standards#
- JSON Web Token (RFC 7519) / Bearer Token Usage (RFC 6750): Every layout read or write request is gated by an RS256-signed JWT presented as a Bearer token; the platform validates the signature against a published JWKS endpoint before permitting access.
- OAuth 2.0 (RFC 6749): Fine-grained authorisation uses OAuth 2.0 scope claims to determine whether the authenticated user may read or mutate dashboard layout configuration within their organisation.
- JSON (RFC 8259): Layout state, widget visibility lists, and breakpoint configurations are serialised and stored as JSON, allowing server-side merges of individual settings without rewriting the whole layout record.
- OpenAPI 3.x: The layout persistence service publishes a machine-readable OpenAPI document describing its interface, enabling automated client generation and integration testing.
- Cross-Origin Resource Sharing (WHATWG Fetch Living Standard / RFC 6454): Configurable CORS origin allowlists govern which browser origins may call the layout API, ensuring cross-device access works securely without opening the endpoint to arbitrary origins.
- W3C Web Content Accessibility Guidelines (WCAG) 2.2: The drag-and-drop workspace UI targets WCAG 2.2 conformance, including keyboard-navigable widget controls and responsive layout breakpoints for desktop, tablet, and mobile, consistent with the platform-wide accessibility commitment.
- UUID (RFC 4122): Every layout record is assigned a version-4 UUID as its identifier, providing collision-resistant per-user, per-dashboard references across the multi-tenant data store.
Key Features#
- Customisable Widget Layouts: Drag-and-drop widget arrangement with position, size, and ordering control across responsive breakpoints
- Multiple Dashboard Support: Personalise layouts for the primary dashboard, investigation dashboard, analytics dashboard, and custom role-specific dashboards
- Widget Visibility Control: Show or hide specific widgets without losing layout configuration, enabling quick workspace switching between operational modes
- Responsive Design: Separate layout configurations for desktop, tablet, and mobile breakpoints keep the workspace usable on whichever device field staff or analysts work from
- Automatic Persistence: Layout changes are saved automatically on the server and restored on next login with no manual save step
- Automatic Delivery of New Widgets: When the platform releases a new dashboard widget, it is added to each user's saved layout in a sensible position on next load; the delivery is recorded server-side so it happens exactly once per user, and the surfaced widget can then be moved, resized, or removed like any other
- Per-User Isolation: Each user maintains independent layout preferences scoped to their organisation, with complete data separation between tenants
Use Cases#
- Analysts configuring dashboards to surface the data views most relevant to their current caseload
- Investigators arranging investigation-specific widgets for efficient case management without distraction from unrelated modules
- Supervisors setting up operational dashboards with team performance, workload distribution, and alert queue widgets
- Administrators managing platform-wide default layouts that new users inherit on first login
- Cross-functional teams maintaining separate named dashboards for different operational contexts, switching between them without reconfiguration
- Long-time users with heavily customised dashboards still discovering newly released capabilities, such as a new analytics widget, without rebuilding their layout or reverting to the default
Integration#
- Works with the platform widget system for available widget discovery, per-widget configuration, and one-time surfacing of newly released widgets into saved layouts
- Connects with JWT-authenticated user sessions for per-user layout storage and retrieval
- Supports organisation-level default layouts that users can personalise without affecting the organisational default
- Compatible with admin dashboard management for platform-wide configuration enforcement
Last Reviewed: 2026-07-16 Last Updated: 2026-07-16