Security

What capability gives users permissions to edit custom alert actions?

responsys_cm
Builder

I have a customer that needs a group of non-Splunk admin users to be able to create and manage custom alert actions. I don't see any capabilities specific to that function.

Is there a way to give them access to that without granting them admin all objects?

Thx.

0 Karma

p_gurav
Champion

Hi,

Can you try giving below capability to user instead of admin all objects:

edit_tcp
list_settings
schedule_search

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...