Security

How do I allow users to edit a view?

matt
Splunk Employee
Splunk Employee

If our users navigate to Manager --> Views they can see all the views, but they do not have permissions to edit or add new. What capability is required for this?

Tags (3)
1 Solution

matt
Splunk Employee
Splunk Employee

Its not so much a capability but a permission on the app. If you go to Manager » Apps » » Permissions you can give additional roles write capability which will allow them to be able to share objects with other users. If global write perms on the app are to broad your comfort you can make the write perms more granular by creating a $SPLUNK_HOME/etc/apps//metadata/local.meta file and defining the granular write capability. You can use the default.meta file in that same directory as an example of the format. You would only need to define the modified capabilities.

View solution in original post

0 Karma

matt
Splunk Employee
Splunk Employee

Its not so much a capability but a permission on the app. If you go to Manager » Apps » » Permissions you can give additional roles write capability which will allow them to be able to share objects with other users. If global write perms on the app are to broad your comfort you can make the write perms more granular by creating a $SPLUNK_HOME/etc/apps//metadata/local.meta file and defining the granular write capability. You can use the default.meta file in that same directory as an example of the format. You would only need to define the modified capabilities.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...