https://community.splunk.com/t5/Installation/Splunk-Role-Capability-to-Download-Create-Splunk-App/m-p/39004#M602 <P>I would like to know what capability I need to disable in admin role that will disable the admin user from downloading or creating a splunk app.</P> Mon, 19 Nov 2012 19:06:17 GMT pdash 2012-11-19T19:06:17Z https://community.splunk.com/t5/Installation/Splunk-Role-Capability-to-Download-Create-Splunk-App/m-p/39004#M602 <P>I would like to know what capability I need to disable in admin role that will disable the admin user from downloading or creating a splunk app.</P> Mon, 19 Nov 2012 19:06:17 GMT https://community.splunk.com/t5/Installation/Splunk-Role-Capability-to-Download-Create-Splunk-App/m-p/39004#M602 pdash 2012-11-19T19:06:17Z https://community.splunk.com/t5/Installation/Splunk-Role-Capability-to-Download-Create-Splunk-App/m-p/39005#M603 <P>The list of default capabilities is shown <A href="http://docs.splunk.com/Documentation/Splunk/5.0.1/admin/Authorizeconf" target="_blank">here</A>. I don't see anything there specifically related to managing an app. Therefore, I'm going to <EM>guess</EM> that that capability is a subset of <CODE>admin_all_objects</CODE>. A non-admin user can <EM>view</EM> applications in the Apps link of the Manager, but can't enable or disable them, nor change permissions on objects contained therein.</P> <P>It doesn't appear as though the <EM>admin</EM> role can be separated from the ability to manipulate apps at this time.</P> <P>If you're concerned about users with admin privileges rampantly installing apps, you might consider making them a non-admin user, but with enough added capabilities to administer the objects that they <EM>do</EM> need to tweak.</P> Mon, 28 Sep 2020 12:49:46 GMT https://community.splunk.com/t5/Installation/Splunk-Role-Capability-to-Download-Create-Splunk-App/m-p/39005#M603 sowings 2020-09-28T12:49:46Z