You can also pass a priority as a dashlet’s config.
$dashboard->add(
'My tactical overview',
'monitoring/tactical',
0 // Should be the first dashlet then
);
That’s only necessary if there’s remaining non-PHP. Otherwise they’re discouraged.
That’s probably because it accesses the Auth object which is not recommended at this stage. If it’s about access to all dashboards this module provides (not individual ones), I’d rather solve this with a special role.