https://community.splunk.com/t5/Splunk-Search/How-to-Show-how-many-users-have-access-to-an-App/m-p/606675#M210987 <P>Start with this query to get a list of apps and the roles allowed to read (access) them.&nbsp; An asterisk (*) means all roles have access.&nbsp; Then cross-reference that with your list of roles and users with those roles.</P><LI-CODE lang="markup">| rest splunk_server=local /servicesNS/-/-/apps/local | search * | fields title eai:acl.perms.read</LI-CODE> Fri, 22 Jul 2022 15:34:34 GMT richgalloway 2022-07-22T15:34:34Z https://community.splunk.com/t5/Splunk-Search/How-to-Show-how-many-users-have-access-to-an-App/m-p/606658#M210984 <P>Hi all,</P> <P>I'm trying to create a search that gives me back a table of all Apps and the amount of users that have access to it.</P> <P>I can generate a list with all indexes and the amount of users that have access to it but I can't think of a way to do the same with Apps. I can generate who has accessed the app and when, but I can't seem to generate a list with the amount of users that have access to a specific app.</P> <P>Anyone with an idea?</P> Fri, 22 Jul 2022 15:00:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Show-how-many-users-have-access-to-an-App/m-p/606658#M210984 SevenDos 2022-07-22T15:00:25Z https://community.splunk.com/t5/Splunk-Search/How-to-Show-how-many-users-have-access-to-an-App/m-p/606675#M210987 <P>Start with this query to get a list of apps and the roles allowed to read (access) them.&nbsp; An asterisk (*) means all roles have access.&nbsp; Then cross-reference that with your list of roles and users with those roles.</P><LI-CODE lang="markup">| rest splunk_server=local /servicesNS/-/-/apps/local | search * | fields title eai:acl.perms.read</LI-CODE> Fri, 22 Jul 2022 15:34:34 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Show-how-many-users-have-access-to-an-App/m-p/606675#M210987 richgalloway 2022-07-22T15:34:34Z