Our issue with this app is that we would need to give list_storage_passwords level access to everyone in the Splunk group for alerting to teams.
In TEAMS, since an alert_action runs as the user, AND the Teams App handles creds PROPERLY, list_storage_passwords is required.
https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/secretstorage/secretstoragerbac/…
it's not the USER'S password but the password used to auth to Teams, so the alert action needs the Teams creds.
bottom line is we dont like an entire team having this level of access. any options we are missing?
