I've created a new role in the web interface and want users assigned to that role to be able to change their own passwords. I gave the role the changeownpassword capability, but when the user signs in and clicks their name, and then Edit Account, they get an error. I don't see any other capabilities that sound like they grant access to that screen. Is there some setting that I'm missing?
I'm not sure what it would be that would combine with
change_own_password, but you may want to allow that role to inherit the capabilities of the lowliest user, the
If there is something in the
user role that offends... create a new role say
my_user, with all the capability of the
user role and inherit it from your new role. Then go back and remove things one by one from your
my_user if they offend... checking to be sure that your new role still can edit their own account info.
I added all of the capabilities from the user role and then removed them one by one. It looks like in addition to changeownpassword I also needed both list_inputs and restpropertiesget before it would allow me to access the Edit Account screen.
Ah... yes. restpropertiesget is most likely how Splunk brings back/accesses the account info... glad you got it to work.