Monitoring Splunk

Can i restrict users accessing other apps ??

rakesh_498115
Motivator

Hi..

i have created two apps say MYAPP and GUESTAPP and have created a few user profiles to login to the splunk.I dont want these users to access the dashboards and forms that are in MYAPP i.e i dont want to give the users to access MYAPP . i Need to restrict their access to GUESTAPP alone...

How can i do it ?? thnx.

Tags (1)

jonuwz
Influencer

Create a role for this group of users. Put the user accounts in the role.

Go to Manager > Apps and change the permissions on each app as you see fit.

You will probably need to go through each app that is enabled, and change the read/write from 'everyone' to something more suited to your needs

yoho
Contributor

Is there any way to deny access to applications by default but only give access to selected applications for a specific role?

yannK
Splunk Employee
Splunk Employee

works only on splunk enteprise, not on splunk free.

  • first, you create a role, and eventually put users with that role.
  • go to you app settings (manager > apps > permissions) and put the permissions to only the members of this group (and admin at least) this will also be the default permissions to any object of this app (but you can probably change individually later)
0 Karma

rakesh_498115
Motivator

How can we create a role for group of users ..? can you pls tell wat options i have to give in the role to restrict users to MYAPP ..

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...