https://community.splunk.com/t5/Getting-Data-In/Which-role-allows-for-REST-API-KV-Store-Updates/m-p/489465#M83688 <P>I have a dashboard linked to a JavaScript file which allows users to click a button that will pass updates to the KV Store. Therefore, I need to know the minimum amount of access I need to give to users so they can interact with this dashboard successfully.</P> <P>I have been reading about the roles here: <A href="https://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities#List_of_available_capabilities" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities#List_of_available_capabilities</A></P> <P>It seems like the role I should need is called "rest_properties_set" which is included in the user, power, and admin role. However, when testing my dashboard with just the user role, I get the following error:</P> <PRE><CODE>[SPLUNKD] User 'kv_api_test' with roles { kv_api_test, user } cannot write: /nobody/kvStoreApp/collections/myKVStore { read : [ * ], write : [ admin, power ] }, export: app, removable: no </CODE></PRE> <P>My user account is able to update the KV Store when I add the "rest_apps_management" role. However, this role is meant for admins, and the definition states it allows users to alter other apps and do far more than update the KV Store.</P> <P>How can I restrict users to only be able to edit KV Store entries without giving any additional access?</P> Wed, 30 Sep 2020 02:20:11 GMT bofasplunkguy 2020-09-30T02:20:11Z https://community.splunk.com/t5/Getting-Data-In/Which-role-allows-for-REST-API-KV-Store-Updates/m-p/489465#M83688 <P>I have a dashboard linked to a JavaScript file which allows users to click a button that will pass updates to the KV Store. Therefore, I need to know the minimum amount of access I need to give to users so they can interact with this dashboard successfully.</P> <P>I have been reading about the roles here: <A href="https://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities#List_of_available_capabilities" target="_blank">https://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities#List_of_available_capabilities</A></P> <P>It seems like the role I should need is called "rest_properties_set" which is included in the user, power, and admin role. However, when testing my dashboard with just the user role, I get the following error:</P> <PRE><CODE>[SPLUNKD] User 'kv_api_test' with roles { kv_api_test, user } cannot write: /nobody/kvStoreApp/collections/myKVStore { read : [ * ], write : [ admin, power ] }, export: app, removable: no </CODE></PRE> <P>My user account is able to update the KV Store when I add the "rest_apps_management" role. However, this role is meant for admins, and the definition states it allows users to alter other apps and do far more than update the KV Store.</P> <P>How can I restrict users to only be able to edit KV Store entries without giving any additional access?</P> Wed, 30 Sep 2020 02:20:11 GMT https://community.splunk.com/t5/Getting-Data-In/Which-role-allows-for-REST-API-KV-Store-Updates/m-p/489465#M83688 bofasplunkguy 2020-09-30T02:20:11Z