https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191145#M5632 <P>The word "admin" is anathema to our IA people. As a result, even though I am the only Splunk developer, I am not permitted to have "admin" privileges. So I have created a new role named "manager". But this role does not have all the permissions I need. What I need is to have full access to all the menu options in the attached screenshot. </P> <P>I do not get Data inputs and Indexes, though if I copy and paste into the address bar I can get to these pages. But I don't have the capability to full app management.</P> <P><IMG src="http://answers.splunk.com//storage/ManagerCapabilities.png" alt="alt text" /></P> Mon, 17 Mar 2014 16:30:40 GMT kmattern 2014-03-17T16:30:40Z https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191145#M5632 <P>The word "admin" is anathema to our IA people. As a result, even though I am the only Splunk developer, I am not permitted to have "admin" privileges. So I have created a new role named "manager". But this role does not have all the permissions I need. What I need is to have full access to all the menu options in the attached screenshot. </P> <P>I do not get Data inputs and Indexes, though if I copy and paste into the address bar I can get to these pages. But I don't have the capability to full app management.</P> <P><IMG src="http://answers.splunk.com//storage/ManagerCapabilities.png" alt="alt text" /></P> Mon, 17 Mar 2014 16:30:40 GMT https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191145#M5632 kmattern 2014-03-17T16:30:40Z https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191146#M5633 <P>Add "admin_all_object" capability to manager role.</P> Mon, 28 Sep 2020 16:09:41 GMT https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191146#M5633 somesoni2 2020-09-28T16:09:41Z https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191147#M5634 <P>But that appears to give admin capabilities to everything. that won't work.</P> Mon, 17 Mar 2014 17:31:53 GMT https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191147#M5634 kmattern 2014-03-17T17:31:53Z https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191148#M5635 <P>I couldn't find any other capabilities which will allow to edit/view data inputs from settings. Updating data inputs and indexes are the admin activities, but Splunk doesn't have capabilities defined for them individually.</P> Mon, 17 Mar 2014 19:30:02 GMT https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191148#M5635 somesoni2 2014-03-17T19:30:02Z https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191149#M5636 <P>Alternatively, just edit the .conf files manually (or on a deployment server and push them out it you have a distributed environment). Then you can control the access to the .conf files by OS level file permissions.</P> Mon, 17 Mar 2014 22:19:21 GMT https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191149#M5636 rtadams89 2014-03-17T22:19:21Z https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191150#M5637 <P>I'm not allowed to have any OS level capabilities. I've been doing this kind of Splunk work for almost five years and this is the first time I have been shut down. Don't work for the Department of Defense if you want to work on Splunk.</P> <P>The problem isn't Splunk admin capabilities, it is the term "admin" that IA doesn't like! They won't bother to learn what the Splunk admin role is, only that it is "Administrative in nature and therefore restriced." </P> <P>Von Schiller said it best, "Against stupidity the very gods themselves contend in vein."</P> Tue, 18 Mar 2014 13:40:13 GMT https://community.splunk.com/t5/Security/Create-new-role-with-almost-admin-capabilities/m-p/191150#M5637 kmattern 2014-03-18T13:40:13Z