I have a customer that needs a group of non-Splunk admin users to be able to create and manage custom alert actions. I don't see any capabilities specific to that function.
Is there a way to give them access to that without granting them admin all objects?
Thx.
Hi,
Can you try giving below capability to user instead of admin all objects:
edit_tcp
list_settings
schedule_search