Is it possible to create a service account just to authenticate to Splunk API for conf editing?

[Log_wrangler]

I am reading thru users, roles, and permissions documentation but not sure how to set this up.

Ideally I want an account (user/pwd) that can authenticate to Splunk api and only change .confs within a certain app...

Wondering if that is possible.

Thank you

[Log_wrangler · Accepted solution]

So I create an account with all the rest_* capabilities but it looks like you still need admin_all_objects...