Getting Data In

What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

GauriSplunk
Path Finder

Hello,

I want to find if a role has any Read/Write permissions on any Splunk objects using REST API.
Which REST API call do I use?

I have created a role that has RW permission on some search/dashboard objects only. It does not have any permissions at app level.

I want to use a REST find to find which objects this role has permissions on. How do I do it?

thanks

0 Karma

duartet
Path Finder
0 Karma

javiergn
Super Champion

I don't have access to any Splunk instance at the moment but try the following:

| rest /services/authentication/users splunk_server=local 

It might not give you the level of detail you are looking for but it should be a start.

GauriSplunk
Path Finder

If a give a role permission on a splunk object , I see the entry in local.meta. but how do i get this information via a REST API call?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...