Deployment Architecture
Highlighted

What are the minimum capabilities needed to modify and push config change from Deployment Server?

Champion

I'd like to have a role which allows a user to manage config changes and deployment (deploy-server) from Splunk deployment server.

I don't think this user needs admin access. I found the following capability in authorize.conf.spec:

[capability::edit_deployment_server]
        * Self explanatory. The deployment server admin endpoint requires this cap for edit.

Is this all that is needed?

Highlighted

Re: What are the minimum capabilities needed to modify and push config change from Deployment Server?

Champion

I have confirmed that the capability is all that is needed to reload deploy-server.

editdeploymentserver = enabled

View solution in original post

Highlighted

Re: What are the minimum capabilities needed to modify and push config change from Deployment Server?

Engager

list_deployment_server capability is all that is needed to reload a deployment server.

0 Karma