<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Changing permissions for multiple eventtypes in Security</title>
    <link>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79388#M2630</link>
    <description>&lt;P&gt;I do not find this answer acceptable. It is a royal pain to have to click twice on every single knowledge object to change the same setting. Due to our users creating dangerous dashboards for splunk performance, we are forced to control the privileges for every single knowledge object they create. As a result I spend so much time just changing permissions on sometimes more than 50 objects. It's ridiculous. And this is only talking about permissions. What about  enabling, disabling, moving, deleting? &lt;BR /&gt;
One should be able select them and apply the same setting to all selected KO with just one click. This is what I call "intuitive GUI design".&lt;BR /&gt;
Furthermore, I am writing this today October 4th, 2017, and this was asked in 2012, so 5 years later and still nothing done to improve this. I saw at the conference in 2016 someone demonstrating what I just described, but for some mysterious reason, it never made it in the last version. I would love to know why.&lt;/P&gt;</description>
    <pubDate>Wed, 04 Oct 2017 22:21:46 GMT</pubDate>
    <dc:creator>sansay</dc:creator>
    <dc:date>2017-10-04T22:21:46Z</dc:date>
    <item>
      <title>Changing permissions for multiple eventtypes</title>
      <link>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79386#M2628</link>
      <description>&lt;P&gt;I have been using Splunk for a few months, and now have a number of eventtypes defined. However, they've all got private permissions (the default), and we've now discovered that they should be shared within the search app for our needs.&lt;/P&gt;

&lt;P&gt;I know I can change the permissions on each eventtype individually, but is there a quicker way to change the permissions for multiple objects?&lt;/P&gt;</description>
      <pubDate>Mon, 27 Feb 2012 15:51:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79386#M2628</guid>
      <dc:creator>hmallett</dc:creator>
      <dc:date>2012-02-27T15:51:06Z</dc:date>
    </item>
    <item>
      <title>Re: Changing permissions for multiple eventtypes</title>
      <link>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79387#M2629</link>
      <description>&lt;P&gt;Permissions are set on a per object basis, so they do need to be changed individually. There isn't a global permissions feature that would allow you to change a particular subset of permissions in an automated fashion. You may be able to script something to look at the local.meta file in the metadata folder of the app/user directory where the object exists, but you'd obviously need to do that outside of the product itself. &lt;/P&gt;</description>
      <pubDate>Mon, 27 Feb 2012 17:07:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79387#M2629</guid>
      <dc:creator>jbsplunk</dc:creator>
      <dc:date>2012-02-27T17:07:10Z</dc:date>
    </item>
    <item>
      <title>Re: Changing permissions for multiple eventtypes</title>
      <link>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79388#M2630</link>
      <description>&lt;P&gt;I do not find this answer acceptable. It is a royal pain to have to click twice on every single knowledge object to change the same setting. Due to our users creating dangerous dashboards for splunk performance, we are forced to control the privileges for every single knowledge object they create. As a result I spend so much time just changing permissions on sometimes more than 50 objects. It's ridiculous. And this is only talking about permissions. What about  enabling, disabling, moving, deleting? &lt;BR /&gt;
One should be able select them and apply the same setting to all selected KO with just one click. This is what I call "intuitive GUI design".&lt;BR /&gt;
Furthermore, I am writing this today October 4th, 2017, and this was asked in 2012, so 5 years later and still nothing done to improve this. I saw at the conference in 2016 someone demonstrating what I just described, but for some mysterious reason, it never made it in the last version. I would love to know why.&lt;/P&gt;</description>
      <pubDate>Wed, 04 Oct 2017 22:21:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/79388#M2630</guid>
      <dc:creator>sansay</dc:creator>
      <dc:date>2017-10-04T22:21:46Z</dc:date>
    </item>
    <item>
      <title>Re: Changing permissions for multiple eventtypes</title>
      <link>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/697082#M18084</link>
      <description>&lt;P&gt;Hello! Checking in August 22, 2024 -- still not able to edit permissions on multiple objects at once.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 22 Aug 2024 19:16:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Changing-permissions-for-multiple-eventtypes/m-p/697082#M18084</guid>
      <dc:creator>chadmedeiros</dc:creator>
      <dc:date>2024-08-22T19:16:10Z</dc:date>
    </item>
  </channel>
</rss>

