Can an element of a role in authorize.conf scoped to an app?

[davebo1896]

Can an element of a role in authorize.conf be scoped for a particular app?
I have a local app where I would like to give "admin_all_objects" to all power users, but restrict that capability to only the one app.

[gyslainlatsa · Accepted solution]

hi davebo 1896,

yes, you can do so by going to the application of Splunk page and click edit permission, a window like the one below will appear and then select your roles you want for this application and only users who have these rights could access this application.

or you follow this link: http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/Manageknowledgeobjectpermissions

[davebo1896]

So it seems I would need to create a different role that included the additional 'admin_all_objects' capability and enable that on only the relevant app.