Knowledge Management

Some of my users under LDAP are not displayed from the UI, however, all the missed users are still functioning

daniel_splunk
Splunk Employee
Splunk Employee

Some of my users under LDAP are not displayed from the UI, however, all the missed users are still functioning. The behaviour is the same even of I use the admin account to login.

Here is the etc/system/local/authorize.conf

 

 

 

[role_admin]
accelerate_search = enabled
change_own_password = enabled
delete_by_keyword = disabled
edit_search_schedule_window = enabled
edit_sourcetypes = enabled
edit_statsd_transforms = enabled
embed_report = enabled
export_results_is_visible = enabled
get_metadata = enabled
get_typeahead = enabled
grantableRoles = admin
importRoles =
input_file = enabled
list_inputs = enabled
list_metrics_catalog = enabled
output_file = enabled
pattern_detect = enabled
request_pstacks = enabled
request_remote_tok = enabled
rest_apps_view = enabled
rest_properties_get = enabled
rest_properties_set = enabled
rtsearch = enabled
run_multi_phased_searches = enabled
schedule_search = enabled
search = enabled
srchIndexesDefault = *;_*
srchMaxTime = 8640000
upload_lookup_files = enabled

 

 

 

 

Labels (1)
Tags (1)
0 Karma
1 Solution

daniel_splunk
Splunk Employee
Splunk Employee

From your authorize.conf, you have below grantableRoles set which will prevent users other than the one have 'admin' role to be displayed.

grantableRoles = admin

 

To fix this, you can just comment out the "grantableRoles = admin" and it will fix the issue and all user will be able to see from the UI.

 

View solution in original post

0 Karma

daniel_splunk
Splunk Employee
Splunk Employee

From your authorize.conf, you have below grantableRoles set which will prevent users other than the one have 'admin' role to be displayed.

grantableRoles = admin

 

To fix this, you can just comment out the "grantableRoles = admin" and it will fix the issue and all user will be able to see from the UI.

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...