Hi all, when the user tries to create a KV store collection through Lookup Editor, he got the error You do not have permission to make a KV store collection
, even though he is a poweruser.
What capability do I need to add so that he can create a KV store lookup? Thanks,
what capability do we need to just read content or data from kvstore?
I don't want to give admin_all_objects capability to just read data from kvstore, is there any other capability name? which does this function?
You need admin_all_objects to create a lookup. I find it surprising that Splunk requires a user to have such a level just to make a collection.
BTW: I'm going to make this clearer in the Lookup Editor app.