Security

How to change the user roles in .conf files

vhharanpositka
Explorer

Hello

Accidentally I changed the admin role for my admin user in the Splunk UI.
By default
Admin user - admin role and user role.

Now
Admin user - only user role.

So I cant access the Settings --> Access Control.

How can I change the admin roles in the conf files.

Thanks

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Edit $SPLUNK_HOME/etc/system/local/authorize.conf and remove importRoles attribute from the role_admin stanza to restore the default roles.

---
If this reply helps you, an upvote would be appreciated.
0 Karma

vhharanpositka
Explorer

Thanks rich

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!