Sure, it just depends how you want to do it. You can have different security account groups and tune the security however you need to. When it comes to the dashboards, use the "share" section to assign the dashboards to the proper security account groups. In terms of access, I like to think of the "share" as "share" in windows so it's a yes/no deal on viewing it, then the security account group perms will act like your NTFS in getting real nitty gritty on what they can do to the dashboards you "shared" to them.
For the filtering your widgets to only a particular tenant or department, you can do it a couple ways depending on what you need to show. It's going to come down to filtering the widgets by tags... be it tiers, applications, custom/new tags, etc. If you create a custom tag you'll need to keep assigning new resources to it as they're discovered, as that association isn't dynamic (not possible now, but I have a feature req in for that functionality of dynam tagging of resource name */etc.). However, the custom tagging might not be a bad way to go if you can't use the tier/app/resource pool tags for filtering.
Mark
If you find this or any other answer useful please mark the answer as correct or helpful.
