topic Re: How to navigate to users page after adding edit_user capability? in Security

How to navigate to users page after adding edit_user capability?

varad_joshi — Thu, 07 Apr 2016 12:30:25 GMT

So I want users to be able to add other users in the Splunk app. I added edit_users capability to the user, after which I am not able to see any navigation in settings to land on the users page where adding and removal can be done.
Can someone please help?

I am guessing its something silly which I am missing out 🙂

Re: How to navigate to users page after adding edit_user capability?

meenal901 — Thu, 07 Apr 2016 12:47:39 GMT

Hi,

Add "edit_roles" as well and restart splunk.

Re: How to navigate to users page after adding edit_user capability?

varad_joshi — Fri, 08 Apr 2016 10:06:04 GMT

Hello Meenal901,
yes that worked for me.
Thak you 🙂

Re: How to navigate to users page after adding edit_user capability?

varad_joshi — Tue, 29 Sep 2020 09:23:05 GMT

This worked with just adding edit_user capability on 6.4

However I have an environment of version 6.3.2 and edit_user will not let me even show option Access Controls under settings.

If I go to page - http://localhost:8000/en-GB/manager/system/authentication/users?
directly then I can see option to add users but there is no navigation in Splunk which will take me there using GUI.

Adding capability admin_all_objects opens up plenty of other options which we dont want users to see.

To summarize, edit_user works fine in 6.4 but not in 6.3.2
Is there a workaround OR correct way to do it?

Re: How to navigate to users page after adding edit_user capability?

meenal901 — Mon, 11 Apr 2016 07:33:14 GMT

If you're not able to see the navigation, then it means you need to add its corresponding capability too.

Did you try edit_roles?
If you're creating a custom role, also look at importRoles = in authorize.conf spec here

http://docs.splunk.com/Documentation/Splunk/6.0.2/Admin/Authorizeconf

Re: How to navigate to users page after adding edit_user capability?

varad_joshi — Wed, 13 Apr 2016 05:52:13 GMT

I tried edit roles capability. what it will do is not accepted by my. If I give this capability to a user, it can create other users with admin capability as well. Even if the user itself is not an admin.

This is much simplified in 6.4