https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401644#M7083 <P>Hi, </P> <P>Many times, our users create alerts/reports with the cron expression as <CODE>* * * * *</CODE> or <CODE>*/1* * * *</CODE>. </P> <P>And we have to chase the users with back and forth emails and lots of confusion. </P> <P>So, to avoid these issues, it would be better that if we could restrict users by their roles/capabilities with the cron expressions. </P> <P>Please if you have some ideas/workarounds. </P> Fri, 23 Nov 2018 05:58:46 GMT inventsekar 2018-11-23T05:58:46Z https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401644#M7083 <P>Hi, </P> <P>Many times, our users create alerts/reports with the cron expression as <CODE>* * * * *</CODE> or <CODE>*/1* * * *</CODE>. </P> <P>And we have to chase the users with back and forth emails and lots of confusion. </P> <P>So, to avoid these issues, it would be better that if we could restrict users by their roles/capabilities with the cron expressions. </P> <P>Please if you have some ideas/workarounds. </P> Fri, 23 Nov 2018 05:58:46 GMT https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401644#M7083 inventsekar 2018-11-23T05:58:46Z https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401645#M7084 <P>one idea would be ... </P> <P>From Answer by <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/55">@the_wolverine</a> and <a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/79269">@strive</a> <BR /> Set the capabilities for roles in authorize.conf configuration file</P> <P>[capability::schedule_search]<BR /> schedule_search = disabled</P> <P>(requires save and restart)<BR /> Note: <BR /> By default all the capabilities are disabled. <BR /> Roles inherit all capabilities from imported roles, and inherited capabilities cannot be disabled.</P> <P>From - <A href="https://answers.splunk.com/answers/150358/how-to-limit-some-user-roles-from-running-scheduled-searches-on-splunk.html" target="_blank">https://answers.splunk.com/answers/150358/how-to-limit-some-user-roles-from-running-scheduled-searches-on-splunk.html</A></P> Tue, 29 Sep 2020 22:06:56 GMT https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401645#M7084 inventsekar 2020-09-29T22:06:56Z https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401646#M7085 <P>Hi All... any suggestions, ideas please..</P> Tue, 27 Nov 2018 06:42:51 GMT https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401646#M7085 inventsekar 2018-11-27T06:42:51Z https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401647#M7086 <P>Hi All... any suggestions, ideas please</P> Tue, 11 Dec 2018 11:50:13 GMT https://community.splunk.com/t5/Alerting/How-do-you-restrict-users-roles-capabilities-with-cron/m-p/401647#M7086 inventsekar 2018-12-11T11:50:13Z