Security

how can I list the role permissions an all the apps in a report or a dashboard

athorat
Communicator

I need to find out the level of permission (user/power/admin) for the roles/groups on all apps.
any leads on that would be helpful.

Thanks.

Tags (2)
0 Karma

somesoni2
Revered Legend

Try something like this
updated

| rest /services/apps/local splunk_server=local | table title label eai:acl.owner eai:acl.perms.read eai:acl.perms.write

athorat
Communicator

@somesoni2 thanks for the reply.
This gives me all the apps but the owner shows nobody and the rest of the columns shows blank.

Thanks.

0 Karma

Lucas_K
Motivator

table title label eai:acl.owner eai:acl.perms.read eai:acl.perms.write

typo

The owner will be nobody if the app was installed via admin (ie. untared locally) and not created/ownership changed to userid.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...