Security
Highlighted

Can an element of a role in authorize.conf scoped to an app?

Communicator

Can an element of a role in authorize.conf be scoped for a particular app?
I have a local app where I would like to give "adminallobjects" to all power users, but restrict that capability to only the one app.

0 Karma
Highlighted

Re: Can an element of a role in authorize.conf scoped to an app?

Motivator

hi davebo 1896,

yes, you can do so by going to the application of Splunk page and click edit permission, a window like the one below will appear and then select your roles you want for this application and only users who have these rights could access this application.

alt text

or you follow this link: http://docs.splunk.com/Documentation/Splunk/6.3.2/Knowledge/Manageknowledgeobjectpermissions

View solution in original post

Highlighted

Re: Can an element of a role in authorize.conf scoped to an app?

Communicator

So it seems I would need to create a different role that included the additional 'adminallobjects' capability and enable that on only the relevant app.

0 Karma