Why is splunk db having permission issue with ldap users "insufficient permission to access this resource"

[indeed_2000]

Hi

when I login with admin account splunk db work correctly but when users of ldap login got this error!

Cannot communicate with task server, please check your settings.

<?xml version="1.0" encoding="UTF-8"?> <response> <messages> <msg type="WARN">insufficient permission to access this resource</msg> </messages> </response>

splunk db version: 3.9.0

splunk version: 8.5

Any idea?

Thanks

[indeed_2000 · Accepted solution]

After several workaround find solution.

Issue related to the default ldap role. When i set permission on splunkdb app automatically override by default user role.

Finally add dbuser role to the default role of ldap users and issue fixed.

[MuS]

Hi there,

Please check, verify you have configured the roles and permissions for the users - details can be found here https://docs.splunk.com/Documentation/DBX/3.9.0/DeployDBX/Configuresecurityandaccesscontrols

hope that helps ...

cheers, MuS