Security

How to share Objects between Roles in a App

matthewssa
Path Finder

Hello!

I am trying to allow different roles to share access to objects (alerts, reports, etc) with one another in the same app. I don't want to give the users admin access though. I have given the two roles read and write access to the app but when I check edit permission the user is only able to give access to the Everyone, User, and its own role (cirt_3).

The default.meta looks like the following:

[]
access = read : [ admin, cirt_2, cirt_3 ], write : [ admin, cirt_2, cirt_3 ]
export = system

alt text

0 Karma

p_gurav
Champion

Dashboard,reports permissions are role based. If you want to give user based access, you can create different role for group of users. Correct me if I understand your requirement right?

0 Karma

matthewssa
Path Finder

That sounds right. I was wondering if there was a way though for a user to get access to just share objects with another group/role but not actually have access to their content.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...