Usually we set our users in authorize.conf
as -
[role_<name>_user]
importRoles = user
What needs to be added for them so they can use the Add Data feature? They only see the KNOWLEDGE section of Settings. Even the power role doesn't see it.
Give the solution in this answer a try.
https://answers.splunk.com/answering/206281/view.html
Let me know how it goes!
this link in the accepted solution no longer exists -- is there an updated link showing the solution?
Give the solution in this answer a try.
https://answers.splunk.com/answering/206281/view.html
Let me know how it goes!
Wow - pretty elaborate, let me try please ...
Hi @ddrillic, This documentation explains all of the user roles and capabilities and has a page on editing roles with authorize.conf.
Thank you but I don't see the Add Data capability listed on this page...
Any thoughts on this one? ; - )