Getting Data In
Highlighted

What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

Path Finder

Hello,

I want to find if a role has any Read/Write permissions on any Splunk objects using REST API.
Which REST API call do I use?

I have created a role that has RW permission on some search/dashboard objects only. It does not have any permissions at app level.

I want to use a REST find to find which objects this role has permissions on. How do I do it?

thanks

0 Karma
Highlighted

Re: What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

Path Finder

If a give a role permission on a splunk object , I see the entry in local.meta. but how do i get this information via a REST API call?

0 Karma
Highlighted

Re: What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

SplunkTrust
SplunkTrust

I don't have access to any Splunk instance at the moment but try the following:

| rest /services/authentication/users splunk_server=local 

It might not give you the level of detail you are looking for but it should be a start.

Highlighted

Re: What REST API call can I use to find if a role has any read/write permissions on any Splunk objects?

Path Finder
0 Karma