How to set up another LDAP authentication strategy using LDAP users instead of groups?



we have LDAP auth by Active Directory groups.

However only one or two users would like higher permissions (role)

How to do? Setting up another authentication strategy using LDAP users instead of groups?


0 Karma


Hi @realsplunk,

The right solution would be (as mentioned before) to assign these users to a specific LDAP group, and map this group to the needed role in Splunk.

However, if this is not a solution for you, it is still possible to create dedicated users locally on the Splunk Search Heads for these users. If it is only for one or two users, this might be the least complicated way. You have to be aware, that you have to manually manage these user accounts then, if anything changes in between.

0 Karma


Why not just create a new AD group and add the 1-2 users to it? Then map the the new group to the elevated role and you're done.


Not a solution for us 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...