Reporting
Highlighted

How to configure a role to disable the capability to create saved searches?

Builder

Hi,

We have configured a role to disable the capability to create saved searches, adding only the capabilities:
-changeownpassword
-exportresultsisvisible
-rest
properties_get
-search

But I have found that users with this role still can create saved searches.

Any advice?

Regards,

0 Karma
Highlighted

Re: How to configure a role to disable the capability to create saved searches?

Champion

maybe, try disabling these capabilities for this role..
schedule_search Schedule saved searches, create and update alerts, and review triggered alert information.
schedule_rtsearch Schedule real-time saved searches. In order for a user to use this capability their role must also have the schedule_search capability.

0 Karma
Highlighted

Re: How to configure a role to disable the capability to create saved searches?

Builder

Hi inventsekar,

Did you see any of the capabilities that you said in the list that I provide of the role that i configure?

Regards,

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.