Getting Data In

How to modify roles for an LDAP group with the REST API?

maurelio79
Communicator

Hi guys,

Sorry to bother you these days, but it's not so easy work with the REST API without some examples.
Now I need to change roles for an LDAP group: no example, no documentation at all.

Can someone please help me?

I know that the end point is

https://localhost:8089/services/configs/conf-authentication/LDP_PRD

but at this end point, no roles are visible. How can I modify roles for a certain LDAP group?

Thanks and regards.

0 Karma

frobinson_splun
Splunk Employee
Splunk Employee

Hi, @maurelio79,
I might suggest this previous Answers post as a start:
https://answers.splunk.com/answers/189726/determine-which-ldap-groups-are-mapped-to-roles-wi.html

This option involves using the Settings page, and not the REST API.

For the REST API option, here's a link to our REST API documentation on /configs/conf-{file}/{stanza}:
http://docs.splunk.com/Documentation/Splunk/6.3.0/RESTREF/RESTconf#POST_configs.2Fconf-.7Bfile.7D.2F...

If you are using a POST to this endpoint, you might want to double-check that you are passing in the correct stanza name for the setting you want to adjust in authentication.conf. See also:
http://docs.splunk.com/Documentation/Splunk/6.3.0/Admin/Authenticationconf

All best,
@frobinson_splunk

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...