Hi all, when the user tries to create a KV store collection through Lookup Editor, he got the error You do not have permission to make a KV store collection
, even though he is a poweruser.
What capability do I need to add so that he can create a KV store lookup? Thanks,
what capability do we need to just read content or data from kvstore?
I don't want to give admin_all_objects capability to just read data from kvstore, is there any other capability name? which does this function?
You need admin_all_objects to create a lookup. I find it surprising that Splunk requires a user to have such a level just to make a collection.
BTW: I'm going to make this clearer in the Lookup Editor app.
Will this issue be addressed by Splunk in the latest releases?
It's not good to give admin all objects privileges to just read kvstore data.
Thanks
Anil
Hi,
also running into this issue frequently.
Has anyone worked on this or found a solution?
Thanks!