All Apps and Add-ons

how do i create an app and make someone else the owner?

a212830
Champion

Hi,

We don't let users create apps on our search-heads. I was wondering if there was a way for me to create an app and then make someone else (and individual) the owner of that app. Curious as to how people handle this process...

Using Splunk 6...

Tags (2)
0 Karma
1 Solution

somesoni2
Revered Legend

The apps do not have property called owner. I would follow following to handle access to apps.

  1. Create a role for the user and give appropriate access to this role (may be inherit power role and give other access items)
  2. Assign this role to the respective user.
  3. Create the app with admin credential
  4. Change the sharing permission for the app to give write access to the new role created in step 1 for this app.

Here are the steps for Changing permission.

For app level permission, you will find "[]" in the etc/apps//metadata/default.meta. If updating the permission from filesystem.

[]
access = read : [ * ], write : [ admin, power, <add your role> ] 

View solution in original post

somesoni2
Revered Legend

The apps do not have property called owner. I would follow following to handle access to apps.

  1. Create a role for the user and give appropriate access to this role (may be inherit power role and give other access items)
  2. Assign this role to the respective user.
  3. Create the app with admin credential
  4. Change the sharing permission for the app to give write access to the new role created in step 1 for this app.

Here are the steps for Changing permission.

For app level permission, you will find "[]" in the etc/apps//metadata/default.meta. If updating the permission from filesystem.

[]
access = read : [ * ], write : [ admin, power, <add your role> ] 

sowings
Splunk Employee
Splunk Employee

That being said, the metadata files (default.meta for shipping values, local.meta for overrides or locally created content) do have an "owner" key=value pair for objects that get created. You can edit this directly, and restart the search head to "change owner". It's a bit kludgy, and is not usually necessary, however, given that you can adjust permissions as discussed above.

0 Karma
Get Updates on the Splunk Community!

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! &#x1f308; In the United States, as well as many countries around the ...