<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Set Default App by Role? in Security</title>
    <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63462#M2108</link>
    <description>&lt;P&gt;don't you mean &lt;/P&gt;

&lt;P&gt;[role_user]&lt;BR /&gt;
default_namespace = app_name&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 14:47:14 GMT</pubDate>
    <dc:creator>jrodman</dc:creator>
    <dc:date>2020-09-28T14:47:14Z</dc:date>
    <item>
      <title>Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63456#M2102</link>
      <description>&lt;P&gt;Hello,&lt;BR /&gt;
Is there a way to set default app based on role?  I know I can set default app through user-prefs.conf or through the GUI per user; however, this seems a little tedious if users are being mapped through LDAP or scripted authentication.&lt;BR /&gt;&lt;BR /&gt;
Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Fri, 15 Mar 2013 16:19:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63456#M2102</guid>
      <dc:creator>bmacias84</dc:creator>
      <dc:date>2013-03-15T16:19:19Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63457#M2103</link>
      <description>&lt;P&gt;it's in defined in the role as  &lt;STRONG&gt;"default app"&lt;/STRONG&gt; in &lt;EM&gt;manager &amp;gt; access controls &amp;gt; Roles &amp;gt; ....&lt;/EM&gt;&lt;BR /&gt;
And can be overwritten by the users in their own user preferences.&lt;BR /&gt;
I do not know who win in case of roles inheritance, or users members of multiple roles.&lt;/P&gt;</description>
      <pubDate>Fri, 15 Mar 2013 17:00:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63457#M2103</guid>
      <dc:creator>yannK</dc:creator>
      <dc:date>2013-03-15T17:00:57Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63458#M2104</link>
      <description>&lt;P&gt;Do which conf file I would edit in stead of using the Web UI? I prefer to do all management through conf files with an large env. Thanks&lt;/P&gt;</description>
      <pubDate>Fri, 15 Mar 2013 17:14:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63458#M2104</guid>
      <dc:creator>bmacias84</dc:creator>
      <dc:date>2013-03-15T17:14:52Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63459#M2105</link>
      <description>&lt;P&gt;Try this:&lt;BR /&gt;
In user-prefs.conf file write this:&lt;BR /&gt;
default_namespace = &lt;APP name=""&gt;&lt;/APP&gt;&lt;/P&gt;

&lt;P&gt;Like to admin give default app as search &lt;BR /&gt;
$SPLUNK_HOME/etc/users/admin/user-prefs/local/user-prefs.conf&lt;BR /&gt;
default_namespace = search&lt;/P&gt;

&lt;P&gt;-Kamal Bisht&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 13:31:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63459#M2105</guid>
      <dc:creator>kml_uvce</dc:creator>
      <dc:date>2020-09-28T13:31:54Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63460#M2106</link>
      <description>&lt;P&gt;authorize.conf, usually in $SPLUNK_HOME/etc/system/local&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2013 16:04:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63460#M2106</guid>
      <dc:creator>yannK</dc:creator>
      <dc:date>2013-03-19T16:04:19Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63461#M2107</link>
      <description>&lt;P&gt;Actually, although most things on that page are set in authorize.conf, the "default app" setting ends up in user-prefs.conf,  written to etc/apps/&lt;APPNAME&gt;/local/user-prefs.conf  &lt;/APPNAME&gt;&lt;/P&gt;

&lt;P&gt;as &lt;/P&gt;

&lt;P&gt;[role_user]&lt;BR /&gt;
default_namespace = &lt;YOUR app="" name=""&gt;&lt;/YOUR&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 14:14:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63461#M2107</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2020-09-28T14:14:10Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63462#M2108</link>
      <description>&lt;P&gt;don't you mean &lt;/P&gt;

&lt;P&gt;[role_user]&lt;BR /&gt;
default_namespace = app_name&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 14:47:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63462#M2108</guid>
      <dc:creator>jrodman</dc:creator>
      <dc:date>2020-09-28T14:47:14Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63463#M2109</link>
      <description>&lt;P&gt;Ugh.  Yes, thanks.  Splunkbase mangled my comment. I guess if you use corner brackets in a comment it thinks you're trying to write xml.&lt;/P&gt;</description>
      <pubDate>Mon, 16 Sep 2013 21:56:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63463#M2109</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2013-09-16T21:56:23Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63464#M2110</link>
      <description>&lt;P&gt;yes, see &lt;A href="http://docs.splunk.com/Documentation/Splunk/5.0.4/Admin/Whatsanapp"&gt;http://docs.splunk.com/Documentation/Splunk/5.0.4/Admin/Whatsanapp&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 16 Sep 2013 22:04:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63464#M2110</guid>
      <dc:creator>yannK</dc:creator>
      <dc:date>2013-09-16T22:04:29Z</dc:date>
    </item>
    <item>
      <title>Re: Set Default App by Role?</title>
      <link>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63465#M2111</link>
      <description>&lt;P&gt;Today I had to deal with this issue, and I found out that the path in the hosts of our cluster is&lt;/P&gt;

&lt;P&gt;etc/apps/user-prefs/local/user-prefs.conf&lt;/P&gt;

&lt;P&gt;We have version 6.2.5&lt;/P&gt;</description>
      <pubDate>Tue, 22 Dec 2015 23:16:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Set-Default-App-by-Role/m-p/63465#M2111</guid>
      <dc:creator>sansay</dc:creator>
      <dc:date>2015-12-22T23:16:04Z</dc:date>
    </item>
  </channel>
</rss>

