Getting Data In

What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

GauriSplunk
Path Finder

Hello,

I want to find if a role has any Read/Write permissions on any Splunk objects using REST API.
Which REST API call do I use?

I have created a role that has RW permission on some search/dashboard objects only. It does not have any permissions at app level.

I want to use a REST find to find which objects this role has permissions on. How do I do it?

thanks

0 Karma

duartet
Path Finder
0 Karma

javiergn
Super Champion

I don't have access to any Splunk instance at the moment but try the following:

| rest /services/authentication/users splunk_server=local 

It might not give you the level of detail you are looking for but it should be a start.

GauriSplunk
Path Finder

If a give a role permission on a splunk object , I see the entry in local.meta. but how do i get this information via a REST API call?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...