Splunk Cloud Platform

Splunk add-on for salesforce

sarit_s6
Engager

Hello

How can i give the users permissions to create new inputs ? i've changes the app permission so their role will have write permission but still they cannot add new inputs 

Labels (2)
0 Karma

kiran_panchavat
Champion

@sarit_s6 

Refer this

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma

kiran_panchavat
Champion

@sarit_s6 

The add-on is configured so that all users have read access, while only Admin and Power User roles have write access.

[]
access = read : [ * ], write : [ admin, sc_admin, power ]
export = system

[views]
access = read : [ * ], write : [ admin ]
export = none

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma

kiran_panchavat
Champion

@sarit_s6 

Which role has been assigned to the user? Is the user set as a regular User, a Power User, or an Admin?

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma

sarit_s6
Engager

thanks

the user is basic user but i added his role to the write permission
im using splunk cloud so i cannot see the configuration files, just the web ui

0 Karma

kiran_panchavat
Champion

@sarit_s6Does the user have the capability to create a new input?

https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/9.4/manage-splunk-... 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma

sarit_s6
Engager

which capability should it be ? im using splunk cloud and not enterprise 

0 Karma

kiran_panchavat
Champion

@sarit_s6 

Note: In nearly all cases, capabilities whose names begin with edit_ give users the ability to perform create, read, update, and delete operations for the feature with which they associate. For example, the edit_udp capability grants you the ability to create, read, update, and delete UDP network inputs - even if you do not have access to edit other types of inputs. Exercise caution when assigning edit_ capabilities.

https://help.splunk.com/en/splunk-cloud-platform/administer/manage-users-and-security/9.3.2411/manag... 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...