Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Security
- :
- Re: can I clone a role?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I want to create new roles in Splunk 6, which are based upon existing roles. Is there a way to clone roles? It's not apparent in the gui...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is no option to clone the roles from UI but you can do the same using conf files. The file name to be updated will be authorize.conf. You can copy existing stanza to create new roles and the refresh the authentication (without restart) using following link
http(s)://YourSplunkServer:8000/en-US/debug/refresh?entity=admin/auth-services
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In Splunk 8.0 the ability to clone a role was added. Simply go to the Roles page, and next to a role select Edit > Clone!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is no option to clone the roles from UI but you can do the same using conf files. The file name to be updated will be authorize.conf. You can copy existing stanza to create new roles and the refresh the authentication (without restart) using following link
http(s)://YourSplunkServer:8000/en-US/debug/refresh?entity=admin/auth-services
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Brilliantly simple. The authentication refresh tidbit is gold!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If there are no followup ques, you can close the question by clicking on check mark left to the answer.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Worked perfectly. Thanks!
Community Content Calendar, September edition
Splunkbase Unveils New App Listing Management Public Preview
Leveraging Automated Threat Analysis Across the Splunk Ecosystem
