Hi all, when the user tries to create a KV store collection through Lookup Editor, he got the error
You do not have permission to make a KV store collection, even though he is a poweruser.
What capability do I need to add so that he can create a KV store lookup? Thanks,
You need admin_all_objects to create a lookup. I find it surprising that Splunk requires a user to have such a level just to make a collection.
BTW: I'm going to make this clearer in the Lookup Editor app.