topic Re: Do we need Splunk admin access to work on the REST API calls? in Splunk Cloud Platform

Do we need Splunk admin access to work on the REST API calls?

Srilekha — Thu, 10 Jun 2021 14:33:20 GMT

Need to access the following resources, can we access these endpoints with any role other than Admin?

Saved searches and alerts (https://docs.splunk.com/Documentation/Splunk/8.2.0/RESTREF/RESTsearch)

Is it documented somewhere on users with what roles can access which endpoints?

Re: Do we need Splunk admin access to work on the REST API calls?

isoutamo — Thu, 10 Jun 2021 17:20:14 GMT

It’s not need to be an admin to use REST-api. You could look what are needed cababilties from https://docs.splunk.com/Documentation/Splunk/8.2.0/Admin/authorizeconf

You could create your own role with needed cababilities and grant that to users.

r. Ismo

Re: Do we need Splunk admin access to work on the REST API calls?

Roy_9 — Tue, 27 Jul 2021 07:38:25 GMT

@Srilekha In order to access REST based API’s or if you want to execute any REST based searches on splunk cloud, you need to open a case to splunk support to enable REST access on your splunk cloud stack.