Security

How to restrict users' access only to specific apps?

chanduira
Explorer

Hi Experts,

I have given access to one client by creating a specific index and APPs, but when he logs in, he some times navigates to the Search & reporting tab and creates some lookups. I want to restrict users to all objects under the APPS directory only. I tried to remove permission "global" for Search and Reporting, but after doing this, the user is not able to see his own dashboards, so I reverted the permission back.

Please help how we can achieve original requirement.

0 Karma

renjith_nair
Legend

You can create a role and give permission to only your APP and assign the user to that role. If the user has created some dashboards in another app earlier, you can move those objects to the new app so that user will still be able to access them

https://docs.splunk.com/Documentation/WebLog/1.0/User/Setapplevelrolepermissions

You can set permission on individual objects (dashboards) as well

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...