Query to generate list of users, assigned roles and AD groups

[basanthp]

Can someone advice on the splunk query to generate the list of users, assigned roles and associated Active Directory groups? We are using LDAP authentication based on AD groups.

[martin_mueller · Accepted solution]

You should get your users along with their roles like this:

| rest /services/authentication/users

Getting the mapped AD groups for your roles should be possible through one of these endpoints: http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTconfig
I don't have a Splunk to test right now though, if you don't find a way I'll get back to this later.