All Apps and Add-ons

Why are my users unable to change the permissions of a lookup?

paimonsoror
Builder

I have the lookup editor deployed to my environment, and am finding that my users are not able to tweak the permissions of the lookups they created. Am I maybe missing a role?

0 Karma
1 Solution

paulbannister
Communicator

Hi There,

As far as I'm aware adjusting the permissions of lookup's within the lookup editor app isn't a feature that exists, I find myself having into "Settings > Lookups > Lookup Table Files" to adjust the permissions where needed

I believe for a user to be able to adjust the permissions for their lookup it may require them to have write permissions for the particular app in question

View solution in original post

paulbannister
Communicator

Hi There,

As far as I'm aware adjusting the permissions of lookup's within the lookup editor app isn't a feature that exists, I find myself having into "Settings > Lookups > Lookup Table Files" to adjust the permissions where needed

I believe for a user to be able to adjust the permissions for their lookup it may require them to have write permissions for the particular app in question

kbehl
Explorer

In case you are looking to give write permissions to an app, here is what you are required to do:
Source: splunk docs
Steps

1 From the Splunk Home page, select any app in the Apps Panel to open the app.
2 Click on the Applications menu in the Splunk bar, and select Manage Apps.
3 Find the app that you want to adjust permissions for and open its Permissions settings.
4 On the Permissions page for the app, give the role Read and Write permissions.
5 Click Save to save your changes.

0 Karma

LukeMurphey
Champion

BTW: the Lookup Editor actually just redirects users to the built-in permission page. Thus, it is doing exactly what this answer suggests.

0 Karma

paimonsoror
Builder

Hmm, so it looks like when i go to edit the permissions of a lookup through the "Lookup Table Files" page, the selections are all grayed out. Same behavior as when you try to do it through the Editor.

0 Karma

paulbannister
Communicator

Interesting, what roles have your users been granted?

0 Karma

paimonsoror
Builder
accelerate_search
change_own_password
edit_search_schedule_window
export_results_is_visible
extra_x509_validation
get_metadata
get_typeahead
input_file
list_inputs
output_file
pattern_detect
request_remote_tok
rest_apps_view
rest_properties_get
rest_properties_set
search
0 Karma

paulbannister
Communicator

Do your users have write permissions for the app the lookup's are situated in?

paimonsoror
Builder

omg. what a noob mistake. Good lord. THANKS

0 Karma

paulbannister
Communicator

No worries, sometimes we all look so hard for the complicated issues that we miss the obvious ones, happy splunking!

0 Karma

paimonsoror
Builder

Oh interesting, I'll see if I can have my users test out going through the settings page. Thanks for the tip. Will report back with an accepted answer after verifying.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...