Disable capabilities to User role users

[nagarjuna280]

I would like to disable some options like

USERS AND AUTHENTICATION

SYSTEM

DATA

DISTRIBUTED ENVIRONMENT

to User role users

How to do

[SplunkersRock · Accepted solution]

Here you go

https://docs.splunk.com/Documentation/Splunk/6.5.0/Search/Restrictrealtimesearch

[adonio]

hello nagarjuna280,
you can check all the capabilities for your user role by navigating to settings -> access control -> roles -> user and scroll down
you can also run this search to view: | rest /services/authorization/roles | search title = user | table title capabilities
now you can remove or add to this role.