Security

User accounts not listed- Why is index not viewable by a particular user?

HathMH
Path Finder

Ran into an issue whereas an index is not viewable by a particular user.

So I tried to see what permission the user has, and find that even though the user (steveng) can log in via the AD credentials, the user is not actually listed in the users page. Also, did a search with various search strings like

|rest /services/authentication/users | search realname=* roles!=app* roles!=index* | dedup title type realname email tz roles

| table title type realname email tz roles | rename title as Username realname as "Full name" tz AS "Time zone" email AS "Email address" type AS "Authentication system"

 

No result still on the ghost account for steveng. Any thoughts?

 

Labels (3)
Tags (1)
0 Karma
1 Solution

venkatasri
SplunkTrust
SplunkTrust

Hi @HathMH 

May be something related to grantableRoles option if you have changed default role!.

https://community.splunk.com/t5/Security/Admin-can-t-see-users-with-a-certain-role-and-we-can-t-take...

---

 

View solution in original post

0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @HathMH 

May be something related to grantableRoles option if you have changed default role!.

https://community.splunk.com/t5/Security/Admin-can-t-see-users-with-a-certain-role-and-we-can-t-take...

---

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...