Security

Change file permissions?

splunkuseradmin
Path Finder

hi everyone,
I have uploaded a lookup file (file1.csv).
Under sharing its permissions are set to private. How do I change it to globally from UI?

When I go to settings > lookups> lookups and tables> permissions>",
and I change from keep APP to This app only (everyone read).

I get this error:

"Splunk could not update permissions for resource data/lookup-table-files [HTTP 403] Client is not authorized to perform requested action; https://127.0.0.1:8089/servicesNS/231234/cisco_cdr/data/lookup-table-files/file1.csv/acl";

Please help me change permissions globally.

Thanks

0 Karma
1 Solution

bpadmanbhachari
Splunk Employee
Splunk Employee

The power user cannot share the lookup file globally, but you can request admin role user to make it global.

settings > lookups> lookup table files > permissions > Change from "This app only" to "All apps". Then it will be global

View solution in original post

0 Karma

bpadmanbhachari
Splunk Employee
Splunk Employee

The power user cannot share the lookup file globally, but you can request admin role user to make it global.

settings > lookups> lookup table files > permissions > Change from "This app only" to "All apps". Then it will be global

0 Karma

evania
Splunk Employee
Splunk Employee

Hi @splunkuseradmin ,

Did you have a chance to check out any answers? If it worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you.

Thanks for posting!

0 Karma

splunkuseradmin
Path Finder

for my admin as well there is only 2 options in permissions
1. private
2 ."this app only"

or you saying, ask him to upload my lookups from his side and change permissions to "All Apps" ?

or can he change permissions of my "private lookups" which i want to make it "globally" ?

0 Karma

bpadmanbhachari
Splunk Employee
Splunk Employee

This is how I tried in my environment.

Created power user, logged in with that user.
Created lookup tables and provided read to all and write permission to admin.
Logged in as admin user now, >> lookup tables >> under permission >> I can find "All apps" tab as well.
You cam try same steps.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...