Can someone advice on the splunk query to generate the list of users, assigned roles and associated Active Directory groups? We are using LDAP authentication based on AD groups.
You should get your users along with their roles like this:
| rest /services/authentication/users
Getting the mapped AD groups for your roles should be possible through one of these endpoints: http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTconfig
I don't have a Splunk to test right now though, if you don't find a way I'll get back to this later.
View solution in original post