I want to find if a role has any Read/Write permissions on any Splunk objects using REST API.
Which REST API call do I use?
I have created a role that has RW permission on some search/dashboard objects only. It does not have any permissions at app level.
I want to use a REST find to find which objects this role has permissions on. How do I do it?
If a give a role permission on a splunk object , I see the entry in local.meta. but how do i get this information via a REST API call?
I don't have access to any Splunk instance at the moment but try the following:
| rest /services/authentication/users splunk_server=local
It might not give you the level of detail you are looking for but it should be a start.