https://community.splunk.com/t5/Security/Disable-Report-Acceleration-for-Specifc-Roles-however-do-not/m-p/123978#M3773 <P>[Were running v6.0.1]</P> <P>Hi, quick question please, from the documentation if we want to disable a user-role from being able to enabe report-acceleration on saved-searches -- we have to disable the schedule_search capability as well.</P> <P>e.g. from the docs -- schedule_search: Schedule saved searches, create and update alerts, review triggered alert information, and turn on report acceleration for searches.</P> <P>However, is there a way to allow a user-role to schedule saved searches, etc. - however NOT be able to enable report-acceleration on their searches?</P> <P>Appreciate any tips</P> <P>thanks</P> Thu, 23 Jan 2014 22:22:56 GMT t9445 2014-01-23T22:22:56Z https://community.splunk.com/t5/Security/Disable-Report-Acceleration-for-Specifc-Roles-however-do-not/m-p/123978#M3773 <P>[Were running v6.0.1]</P> <P>Hi, quick question please, from the documentation if we want to disable a user-role from being able to enabe report-acceleration on saved-searches -- we have to disable the schedule_search capability as well.</P> <P>e.g. from the docs -- schedule_search: Schedule saved searches, create and update alerts, review triggered alert information, and turn on report acceleration for searches.</P> <P>However, is there a way to allow a user-role to schedule saved searches, etc. - however NOT be able to enable report-acceleration on their searches?</P> <P>Appreciate any tips</P> <P>thanks</P> Thu, 23 Jan 2014 22:22:56 GMT https://community.splunk.com/t5/Security/Disable-Report-Acceleration-for-Specifc-Roles-however-do-not/m-p/123978#M3773 t9445 2014-01-23T22:22:56Z https://community.splunk.com/t5/Security/Disable-Report-Acceleration-for-Specifc-Roles-however-do-not/m-p/123979#M3774 <P>A new capability was introduced in version 6.1 which specifically enables/disables the accelerate feature. <BR /> In authorize.conf or via the UI role management page you could set the 'accelerate_search' capability. <BR /> In previous versions there is not an easy way to disable this option.</P> Wed, 15 Oct 2014 21:10:55 GMT https://community.splunk.com/t5/Security/Disable-Report-Acceleration-for-Specifc-Roles-however-do-not/m-p/123979#M3774 drrushi_splunk 2014-10-15T21:10:55Z