Security

Why are changes not saved when trying to add new capabilities a role?

mrtolu6
Path Finder

I'm having issue adding a capabilities to a role. This role allows users to simply just look at a specific dashboard. I'm trying to add the Change_own_password, list_inputs and rest_properties capabilities to the role, so that users with that role can change there own password. But when I save it, the capabilities get removed. What is causing this? What can I do to fix it?

0 Karma

woodcock
Esteemed Legend

Are you using the GUI? Let's say that you are in app-context foo and you are trying to do this, but your Deployment Server is managing app foo and it's local directory. If you make a change from the GUI, the DS will put it back the way that it was and destroy your changes.

0 Karma

wrangler2x
Motivator

This shows what capabilities can be given to a role that inherits from user, power, and admin. You can add a capability to a role that inherits from user, for example, if the capability in the user column is checked.

About defining roles with capabilities

0 Karma

woodcock
Esteemed Legend

Are you in a search head pool or a search head cluster? Is there a load balancer in front of multiple search heads?

0 Karma

wrangler2x
Motivator

I'm seeing the same problem. The role inherits from user, and when I try to add get_metadata, it disappears when saved. I'm guessing that there are certain things that can't be added to a role that inherits from user.

0 Karma

mrtolu6
Path Finder

I only have one search head, no load balance.

0 Karma

woodcock
Esteemed Legend

How are you testing? If you go back as an admin, is the capability still in the role? If so, is the problem that "it doesn't work"? If so, make sure that you log out and back in for the user with the role because capabilities are established at login.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...