<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic permissions in Splunk Cloud Platform</title>
    <link>https://community.splunk.com/t5/Splunk-Cloud-Platform/permissions/m-p/684893#M2981</link>
    <description>&lt;P&gt;I added the 'edit user' capability but retrieved only one user from this URL:&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;STRONG&gt;/services/authentication/users&lt;/STRONG&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;However, when I added 'power user' permissions, I was able to access most of the users. Could you please clarify what the minimum permissions are to retrieve all users?&lt;/P&gt;&lt;P&gt;Additionally, I encountered a similar issue with the URL for fetching triggered alerts:&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;STRONG&gt;/services/alerts/fired_alerts/{ALERT_NAME}&lt;/STRONG&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;What permissions are necessary for accessing this information?&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Sun, 21 Apr 2024 06:16:57 GMT</pubDate>
    <dc:creator>chen</dc:creator>
    <dc:date>2024-04-21T06:16:57Z</dc:date>
    <item>
      <title>permissions</title>
      <link>https://community.splunk.com/t5/Splunk-Cloud-Platform/permissions/m-p/684893#M2981</link>
      <description>&lt;P&gt;I added the 'edit user' capability but retrieved only one user from this URL:&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;STRONG&gt;/services/authentication/users&lt;/STRONG&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;However, when I added 'power user' permissions, I was able to access most of the users. Could you please clarify what the minimum permissions are to retrieve all users?&lt;/P&gt;&lt;P&gt;Additionally, I encountered a similar issue with the URL for fetching triggered alerts:&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;STRONG&gt;/services/alerts/fired_alerts/{ALERT_NAME}&lt;/STRONG&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;P&gt;What permissions are necessary for accessing this information?&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Sun, 21 Apr 2024 06:16:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Cloud-Platform/permissions/m-p/684893#M2981</guid>
      <dc:creator>chen</dc:creator>
      <dc:date>2024-04-21T06:16:57Z</dc:date>
    </item>
    <item>
      <title>Re: permissions</title>
      <link>https://community.splunk.com/t5/Splunk-Cloud-Platform/permissions/m-p/684900#M2982</link>
      <description>&lt;P&gt;You also need the list_all_users capability in your role, to list all users.&lt;/P&gt;&lt;P&gt;For the alerts, your user needs permission to read the alert to fetch triggered alerts.&lt;/P&gt;</description>
      <pubDate>Sun, 21 Apr 2024 10:38:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Cloud-Platform/permissions/m-p/684900#M2982</guid>
      <dc:creator>marnall</dc:creator>
      <dc:date>2024-04-21T10:38:41Z</dc:date>
    </item>
  </channel>
</rss>

