Deployment Architecture

What are the minimum capabilities needed to modify and push config change from Deployment Server?

Champion

I'd like to have a role which allows a user to manage config changes and deployment (deploy-server) from Splunk deployment server.

I don't think this user needs admin access. I found the following capability in authorize.conf.spec:

[capability::edit_deployment_server]
        * Self explanatory. The deployment server admin endpoint requires this cap for edit.

Is this all that is needed?

1 Solution

Champion

I have confirmed that the capability is all that is needed to reload deploy-server.

edit_deployment_server = enabled

View solution in original post

Engager

list_deployment_server capability is all that is needed to reload a deployment server.

0 Karma

Champion

I have confirmed that the capability is all that is needed to reload deploy-server.

edit_deployment_server = enabled

View solution in original post