<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk multi-roles in Security</title>
    <link>https://community.splunk.com/t5/Security/Splunk-multi-roles/m-p/424003#M10028</link>
    <description>&lt;P&gt;Hi &lt;/P&gt;

&lt;P&gt;I have two roles:&lt;/P&gt;

&lt;P&gt;Role A: Restriction to status=500&lt;BR /&gt;
Role B: Restriction to status=440&lt;/P&gt;

&lt;P&gt;User ABC need to have only access to this two status (500 and 440) and User QAZ to status 500.&lt;/P&gt;

&lt;P&gt;I added role B to User QAZ and it's working and Role A and B to User  ABC.&lt;/P&gt;

&lt;P&gt;For  User QAZ it's working but for user ABC it's not working.&lt;BR /&gt;
User QAZ only see status 500 but User ABC see everything.&lt;/P&gt;

&lt;P&gt;So one restriction for user is working but not two.&lt;/P&gt;

&lt;P&gt;I can't do this in one Role status 500 and 400. I need to have two Roles. &lt;/P&gt;</description>
    <pubDate>Mon, 09 Jul 2018 12:14:01 GMT</pubDate>
    <dc:creator>malliniak_2</dc:creator>
    <dc:date>2018-07-09T12:14:01Z</dc:date>
    <item>
      <title>Splunk multi-roles</title>
      <link>https://community.splunk.com/t5/Security/Splunk-multi-roles/m-p/424003#M10028</link>
      <description>&lt;P&gt;Hi &lt;/P&gt;

&lt;P&gt;I have two roles:&lt;/P&gt;

&lt;P&gt;Role A: Restriction to status=500&lt;BR /&gt;
Role B: Restriction to status=440&lt;/P&gt;

&lt;P&gt;User ABC need to have only access to this two status (500 and 440) and User QAZ to status 500.&lt;/P&gt;

&lt;P&gt;I added role B to User QAZ and it's working and Role A and B to User  ABC.&lt;/P&gt;

&lt;P&gt;For  User QAZ it's working but for user ABC it's not working.&lt;BR /&gt;
User QAZ only see status 500 but User ABC see everything.&lt;/P&gt;

&lt;P&gt;So one restriction for user is working but not two.&lt;/P&gt;

&lt;P&gt;I can't do this in one Role status 500 and 400. I need to have two Roles. &lt;/P&gt;</description>
      <pubDate>Mon, 09 Jul 2018 12:14:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-multi-roles/m-p/424003#M10028</guid>
      <dc:creator>malliniak_2</dc:creator>
      <dc:date>2018-07-09T12:14:01Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk multi-roles</title>
      <link>https://community.splunk.com/t5/Security/Splunk-multi-roles/m-p/424004#M10029</link>
      <description>&lt;P&gt;Can you create Role C: Restriction to (status=500) OR (status=440) ?&lt;/P&gt;</description>
      <pubDate>Mon, 09 Jul 2018 13:36:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-multi-roles/m-p/424004#M10029</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2018-07-09T13:36:33Z</dc:date>
    </item>
  </channel>
</rss>

