topic Re: how to prevent users from creating knowledge objects in custom app in Splunk Search

how to prevent users from creating knowledge objects in custom app

AzmathShaik — Tue, 19 Jan 2021 20:08:06 GMT

Hello Splunkers

we are trying to restrict users (non admins) from creating knowledge objects (dashboards and reports) in our custom apps. we would like users to use the dashboards created but not save any dashboards. we have not given write permissions to users for the app. Also we default.meta config file we added the below stanza

[viewstates]

access = read : [ * ], write : [ admin ]

export = system

[views]

access = read : [ * ], write : [ admin ]

we have few groups who have write access to default search and reporting app. is this causing users to create KO's in custom app?

if not can someone suggest me if there is anyway to restrict users doing so.

Re: how to prevent users from creating knowledge objects in custom app

manjunathmeti — Wed, 20 Jan 2021 06:12:09 GMT

If you don't want non-admin users to create any KOs in your app then you can provide only read access to all knowledge objects by adding below in the app's default.meta.

[]

access = read : [ * ], write : [ admin ]
export = system

Note that export = system makes reports and dashboards available to all apps.

Check this page for more information https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/setpermissionsforobjects.

Re: how to prevent users from creating knowledge objects in custom app

AzmathShaik — Wed, 20 Jan 2021 14:29:12 GMT

@manjunathmeti we already have this in our config file. it still allowing users to create KO's

Re: how to prevent users from creating knowledge objects in custom app

manjunathmeti — Wed, 20 Jan 2021 15:21:11 GMT

That should not happen,
1. Check if there is a local.meta file in your app with write access to those user roles.
2. Check if those user roles have all_admin_objects capability or if user roles are inherited from the admin role.

Re: how to prevent users from creating knowledge objects in custom app

AzmathShaik — Wed, 20 Jan 2021 15:51:24 GMT

@manjunathmeti

Here are my configs. i don't have any local.meta file.