topic Re: Do CM and SH manage two different user scheme? in Splunk Enterprise

Do CM and SH manage two different user scheme?

chenyt — Tue, 08 Mar 2022 04:28:08 GMT

Hi,

I just install a new cluster with 3SH and 3IDX and 1CM.

I login to CM from WebUI as admin to change password and create users, roles.

Then I try to use the new password to login from SH WebUI as admin, but fail, then I try the old password , succeed. Then I found the users and roles I created on CM WebUI are not list in SH.

Do CM and SH manage two different user scheme? I can't find this information in document, can anyone point me the right way? Thanks.

Re: Question about user management on different instances

richgalloway — Mon, 07 Mar 2022 14:23:46 GMT

The Cluster Manager controls your indexer cluster only. It has no control over search heads.

There is no need for users and roles to be configured on indexers and the only user the CM needs is admin.

To configure users and roles in a SHC, just sign in to a search head and configure them. The cluster will replicate the new users to other members automatically.

Re: Do CM and SH manage two different user scheme?

chenyt — Wed, 09 Mar 2022 06:37:27 GMT

Thanks for the reply. I did read that part CM controls Indexers and Deployer controls SH in the documents, but I didn't realize that I need to manage different user schemes.

Thanks for answer the question. Have a nice day.