https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15261#M396 <P>Good answer....</P> Fri, 11 Jun 2010 11:57:10 GMT the_wolverine 2010-06-11T11:57:10Z https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15259#M394 <P>We would like to point Splunk to our LDAP, but have the ability to create groups within Splunk. These groups would only be saved within Splunk (no attempt to create the group in LDAP), and then we'd add LDAP users to the Splunk group.</P> <P>This gives us the advantage of pointing to the corporate LDAP (or AD) for authentication, yet as Splunk owners we'd have the capability to manage groups and group membership for Splunk itself for authorization.</P> <P>Is this possible?</P> Fri, 11 Jun 2010 02:38:35 GMT https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15259#M394 cabodj 2010-06-11T02:38:35Z https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15260#M395 <P>Yes. Simply define the groups within Splunk as the users, i.e., define each user to Splunk as its own "group", using "dn" as the groupMemberAttribute. (Also define the users normally as users, using dn as the groupmappingattribute.) Then you'll be able to assign each user to a role (since each user will be their own "group").</P> Fri, 11 Jun 2010 04:38:28 GMT https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15260#M395 gkanapathy 2010-06-11T04:38:28Z https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15261#M396 <P>Good answer....</P> Fri, 11 Jun 2010 11:57:10 GMT https://community.splunk.com/t5/Security/How-to-create-groups-in-Splunk-but-keep-users-in-LDAP/m-p/15261#M396 the_wolverine 2010-06-11T11:57:10Z