How to change the user roles in .conf files

Path Finder


Accidentally I changed the admin role for my admin user in the Splunk UI.
By default
Admin user - admin role and user role.

Admin user - only user role.

So I cant access the Settings --> Access Control.

How can I change the admin roles in the conf files.


Tags (2)
0 Karma


Edit $SPLUNK_HOME/etc/system/local/authorize.conf and remove importRoles attribute from the role_admin stanza to restore the default roles.

If this reply helps you, Karma would be appreciated.
0 Karma

Path Finder

Thanks rich

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...