Why can only admin level users run the iplocation command when this wasn't an issue before?

[sjohnnehta]

For some reason, users with less than admin privileges in Splunk can no longer run iplocation based searches or see dashboard panels with that contained. They were able to, so not sure what I've done. Anyway, I'm not sure where else to check permissions for this internal Splunk function and I'm not clear which troubleshooting steps (btool or whatever) to do next to identify the issue. Iplocation based searches and dashboards work fine for admin level users, so the functionality is there. If I elevate a standard user to admin, it then starts working for them too. Thought I'd try here before opening a case.

Thanks.

[sjohnnehta · Accepted solution]

The reason this happened was because it relied on a field extraction that the users didn't have permissions for. I fixed that up and all good.