Installation

How to Assign Access Role to multiple groups

SplunkDash
Motivator

Hello,

I have a situation where there are 25 different groups  of people and each group of people uses different sets of data (i.e. there are 25 different sets of data, one for each group). We need to create a single dashboard and also need to assign access role in a way that each group can only have access to their data set using the same dashboard.   How I would assign the access role for those 25 different groups. 

Should I create 25 different indexes - one for  each group  and assign access role to those indexes?

Is it possible to create 25 different sourcetypes and assign access role to those sourcetypes  - one for each group and keep all sourcetypes under one index?

Or are there any other ways?

Thank you so  much, any help will be highly appreciated.

  

 

Labels (1)
Tags (1)
0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

The permissions are granted on a per-index basis so if you want to limit the access to the data, you separate it into different indexes (it's one of the cases where splitting data into indexes is advisable).

If you want to use the same dashboard for different user groups (and thus indexes), you have to make it so that the source index used in searches is dynamically settable - not hardcoded.

View solution in original post

PickleRick
SplunkTrust
SplunkTrust

The permissions are granted on a per-index basis so if you want to limit the access to the data, you separate it into different indexes (it's one of the cases where splitting data into indexes is advisable).

If you want to use the same dashboard for different user groups (and thus indexes), you have to make it so that the source index used in searches is dynamically settable - not hardcoded.

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...