Security
Highlighted

How do I grant access to the Edit Account screen for a new role?

New Member

I've created a new role in the web interface and want users assigned to that role to be able to change their own passwords. I gave the role the changeownpassword capability, but when the user signs in and clicks their name, and then Edit Account, they get an error. I don't see any other capabilities that sound like they grant access to that screen. Is there some setting that I'm missing?

0 Karma
Highlighted

Re: How do I grant access to the Edit Account screen for a new role?

Splunk Employee
Splunk Employee

I'm not sure what it would be that would combine with change_own_password, but you may want to allow that role to inherit the capabilities of the lowliest user, the user role.

If there is something in the user role that offends... create a new role say my_user, with all the capability of the user role and inherit it from your new role. Then go back and remove things one by one from your my_user if they offend... checking to be sure that your new role still can edit their own account info.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!

View solution in original post

0 Karma
Highlighted

Re: How do I grant access to the Edit Account screen for a new role?

New Member

I added all of the capabilities from the user role and then removed them one by one. It looks like in addition to changeownpassword I also needed both list_inputs and restpropertiesget before it would allow me to access the Edit Account screen.

0 Karma
Highlighted

Re: How do I grant access to the Edit Account screen for a new role?

Splunk Employee
Splunk Employee

Ah... yes. restpropertiesget is most likely how Splunk brings back/accesses the account info... glad you got it to work.

With Splunk... the answer is always "YES!". It just might require more regex than you're prepared for!