https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370983#M9177 <P>HI amielke,<BR /> I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.<BR /> Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.<BR /> What's your problem?<BR /> Bye.<BR /> Giuseppe</P> Wed, 15 Nov 2017 08:59:41 GMT gcusello 2017-11-15T08:59:41Z https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370982#M9176 <P>Is the Order in a Stanza in the authorize.conf important? Is it possible to change the example from the <A href="http://docs.splunk.com/Documentation/Splunk/7.0.0/Admin/Authorizeconf#authorize.conf.example">documantation</A> to</P> <P>[role_ninja]<BR /> rtsearch = enabled<BR /> importRoles = user<BR /> srchIndexesAllowed = *<BR /> srchIndexesDefault = mail;main<BR /> srchJobsQuota = 8<BR /> rtSrchJobsQuota = 8<BR /> srchDiskQuota = 500<BR /> srchFilter = host=foo</P> <P>The "srchFilter" is now at the bottom.</P> <P>anmie</P> Wed, 15 Nov 2017 08:51:23 GMT https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370982#M9176 amielke 2017-11-15T08:51:23Z https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370983#M9177 <P>HI amielke,<BR /> I don't find that there are any constraints on the stanzas order in authorize.conf or other .conf files.<BR /> Yes, it's possible to change the documentation example, obviously copy file from default folder to local before modifying.<BR /> What's your problem?<BR /> Bye.<BR /> Giuseppe</P> Wed, 15 Nov 2017 08:59:41 GMT https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370983#M9177 gcusello 2017-11-15T08:59:41Z https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370984#M9178 <P>the answer sounds good. I will create the stanza automatically and some parts a constant and some dynamically. </P> <P>thank you</P> Wed, 15 Nov 2017 09:30:01 GMT https://community.splunk.com/t5/Security/Order-Properties-in-authorize-conf/m-p/370984#M9178 amielke 2017-11-15T09:30:01Z