What permission / capability do I need to create KV store collection?

[Motoko89]

Hi all, when the user tries to create a KV store collection through Lookup Editor, he got the error You do not have permission to make a KV store collection, even though he is a poweruser.

What capability do I need to add so that he can create a KV store lookup? Thanks,

[AnilPujar]

what capability do we need to just read content or data from kvstore?

[AnilPujar]

I don't want to give admin_all_objects capability to just read data from kvstore, is there any other capability name? which does this function?

[LukeMurphey]

You need admin_all_objects to create a lookup. I find it surprising that Splunk requires a user to have such a level just to make a collection.

BTW: I'm going to make this clearer in the Lookup Editor app.

[AnilPujar]

Will this issue be addressed by Splunk in the latest releases?

It's not good to give admin all objects privileges to just read kvstore data.

Thanks

Anil

[Splunkstetter]

Hi,

also running into this issue frequently.

Has anyone worked on this or found a solution?

Thanks!