https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97117#M25108 <P>I'm hoping to create apps for each of our departments that only allow them to search specific data from splunk. This <A href="http://docs.splunk.com/Documentation/Splunk/latest/Developer/DefaultApp">Document</A> covers how to limit users to a specific app or apps, however, in that app how do I limit what data they can search on. We dump all of our event log data to the same index, so in a perfect world, these would not be per-index limits, but rather masked search terms that prefix their searches. </P> Thu, 12 Jul 2012 16:12:46 GMT rdevine 2012-07-12T16:12:46Z https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97117#M25108 <P>I'm hoping to create apps for each of our departments that only allow them to search specific data from splunk. This <A href="http://docs.splunk.com/Documentation/Splunk/latest/Developer/DefaultApp">Document</A> covers how to limit users to a specific app or apps, however, in that app how do I limit what data they can search on. We dump all of our event log data to the same index, so in a perfect world, these would not be per-index limits, but rather masked search terms that prefix their searches. </P> Thu, 12 Jul 2012 16:12:46 GMT https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97117#M25108 rdevine 2012-07-12T16:12:46Z https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97118#M25109 <P>In that case you'd probably want to create several roles for the various departments. When you create a role you can have search limitations prepended for that role. Look in Manager &gt; Access Controls &gt; Roles. You can then assign users to that role.</P> Thu, 12 Jul 2012 16:20:59 GMT https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97118#M25109 sdaniels 2012-07-12T16:20:59Z https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97119#M25110 <P>This is exactly what i was looking for. Thank you.</P> Thu, 12 Jul 2012 16:43:52 GMT https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97119#M25110 rdevine 2012-07-12T16:43:52Z https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97120#M25111 <P>Can you please tell me how to access the Manager &gt; access controls &gt; roles?</P> Wed, 23 Dec 2015 14:13:20 GMT https://community.splunk.com/t5/Splunk-Search/Limit-an-Apps-Search-Context/m-p/97120#M25111 rakesh007 2015-12-23T14:13:20Z