Remove Search & Reporting from App dropdown

[kmattern]

The title says it all. I need to remove the Search & Reporting option from the APP dropdown for certain users, or remove the App dropdown from the viewheader.

[jackreeves]

I've created a new App called App1 for a specific role. Therefore I want this role to ONLY see this one app. However there are a number of KOs that App1 is pulling from the original App. Any way to just hide the App dropdown menu in App1?

[somesoni2]

Try this:
Assumption: The user for which you want to remove Search & Reporting from App dropdown, are assigned to a separate Role (say role_Restricted).
1. Login as admin to Splunk UI and go to Manager-> Manage Apps
2. On the Apps page, click on Sharing Permissions for app "Search & Reporting"
3. Remove Read permission for Everyone
4. Give Read/write permission to specific roles per your need, ensuring neither Read nor Write permissions are giving to Role 'role_Restricted'.
5. Click on Save.

Once Users on role 'role_Restricted' login again after log-off, they will not be able to see Search & Reporting in the dropdown.

[somesoni2]

Glad I could help. Please mark the question as solved if there are no followup questions.

[kmattern]

Thanks. worked like a charm