Getting Data In

What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

GauriSplunk
Path Finder

Hello,

I want to find if a role has any Read/Write permissions on any Splunk objects using REST API.
Which REST API call do I use?

I have created a role that has RW permission on some search/dashboard objects only. It does not have any permissions at app level.

I want to use a REST find to find which objects this role has permissions on. How do I do it?

thanks

0 Karma

duartet
Path Finder
0 Karma

javiergn
Super Champion

I don't have access to any Splunk instance at the moment but try the following:

| rest /services/authentication/users splunk_server=local 

It might not give you the level of detail you are looking for but it should be a start.

GauriSplunk
Path Finder

If a give a role permission on a splunk object , I see the entry in local.meta. but how do i get this information via a REST API call?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...