Security
Highlighted

How to navigate to users page after adding edit_user capability?

Communicator

So I want users to be able to add other users in the Splunk app. I added edit_users capability to the user, after which I am not able to see any navigation in settings to land on the users page where adding and removal can be done.
Can someone please help?

I am guessing its something silly which I am missing out 🙂

Tags (3)
0 Karma
Highlighted

Re: How to navigate to users page after adding edit_user capability?

Communicator

Hi,

Add "edit_roles" as well and restart splunk.

0 Karma
Highlighted

Re: How to navigate to users page after adding edit_user capability?

Communicator

Hello Meenal901,
yes that worked for me.
Thak you 🙂

0 Karma
Highlighted

Re: How to navigate to users page after adding edit_user capability?

Communicator

This worked with just adding edit_user capability on 6.4

However I have an environment of version 6.3.2 and edit_user will not let me even show option Access Controls under settings.

If I go to page - http://localhost:8000/en-GB/manager/system/authentication/users?
directly then I can see option to add users but there is no navigation in Splunk which will take me there using GUI.

Adding capability adminallobjects opens up plenty of other options which we dont want users to see.

To summarize, edit_user works fine in 6.4 but not in 6.3.2
Is there a workaround OR correct way to do it?

0 Karma
Highlighted

Re: How to navigate to users page after adding edit_user capability?

Communicator

If you're not able to see the navigation, then it means you need to add its corresponding capability too.

Did you try edit_roles?
If you're creating a custom role, also look at importRoles = in authorize.conf spec here

http://docs.splunk.com/Documentation/Splunk/6.0.2/Admin/Authorizeconf

0 Karma
Highlighted

Re: How to navigate to users page after adding edit_user capability?

Communicator

I tried edit roles capability. what it will do is not accepted by my. If I give this capability to a user, it can create other users with admin capability as well. Even if the user itself is not an admin.

This is much simplified in 6.4

0 Karma